Fluid Attacks Database

Description

Paramiko rsakey.py allows the SHA-1 algorithm In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 13	paramiko	=3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2	-
debian 11	paramiko	=2.10.3-1 \|\| =2.10.4-1 \|\| =2.12.0-1 \|\| =2.12.0-2 \|\| =2.12.0-3 \|\| =2.7.2-1 \|\| =2.7.2-1+deb11u1 \|\| =2.8.0-1 \|\| =2.8.1-1 \|\| =3.4.0-1 \|\| =3.4.0-2 \|\| =3.4.1-1 \|\| =3.4.1-2 \|\| =3.5.0-1 \|\| =3.5.0-1~exp1 \|\| =3.5.1-1 \|\| =3.5.1-2 \|\| =3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2	-
debian 12	paramiko	=2.12.0-2 \|\| =2.12.0-3 \|\| =3.4.0-1 \|\| =3.4.0-2 \|\| =3.4.1-1 \|\| =3.4.1-2 \|\| =3.5.0-1 \|\| =3.5.0-1~exp1 \|\| =3.5.1-1 \|\| =3.5.1-2 \|\| =3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2	-
debian 14	paramiko	=3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2	-
rpm rhel9	bootc-image-builder	-	-
pypi	paramiko	>=0 <=4.0.0	5.0.0

Aliases

References