Safety CI > mytardis/mydata-python

pyup-update-pre-commit-2.13.0-to-3.3.2

2 years, 1 month ago

b09c5e30

Update pre-commit from 2.13.0 to 3.3.2

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pylint-2.8.3-to-2.17.4

2 years, 2 months ago

0968d5fa

Update pylint from 2.8.3 to 2.17.4

paramiko 2.7.2 has known security vulnerabilities.

Package	Installed	Affected	Info
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-requests-2.25.1-to-2.30.0

2 years, 2 months ago

0157ad71

Update requests from 2.25.1 to 2.30.0

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pre-commit-2.13.0-to-3.3.1

2 years, 2 months ago

647bb893

Update pre-commit from 2.13.0 to 3.3.1

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pre-commit-2.13.0-to-3.3.0

2 years, 2 months ago

8e3e4a9e

Update pre-commit from 2.13.0 to 3.3.0

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-requests-toolbelt-0.9.1-to-1.0.0

2 years, 2 months ago

b2805194

Update requests-toolbelt from 0.9.1 to 1.0.0

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-coverage-5.5-to-7.2.5

2 years, 2 months ago

38b7f352

Update coverage from 5.5 to 7.2.5

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-coverage-5.5-to-7.2.4

2 years, 2 months ago

be99ffe4

Update coverage from 5.5 to 7.2.4

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-requests-2.25.1-to-2.29.0

2 years, 2 months ago

291a0548

Update requests from 2.25.1 to 2.29.0

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pylint-2.8.3-to-2.17.3

2 years, 2 months ago

a696f0fd

Update pylint from 2.8.3 to 2.17.3

paramiko 2.7.2 has known security vulnerabilities.

Package	Installed	Affected	Info
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-codecov-2.1.11-to-2.1.13

2 years, 2 months ago

813cca8d

Update codecov from 2.1.11 to 2.1.13

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-psutil-5.8.0-to-5.9.5

2 years, 2 months ago

bab3c5ed

Update psutil from 5.8.0 to 5.9.5

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pytest-6.2.4-to-7.3.1

2 years, 2 months ago

36cbb304

Update pytest from 6.2.4 to 7.3.1

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pytest-6.2.4-to-7.3.0

2 years, 2 months ago

1d1fac7e

Update pytest from 6.2.4 to 7.3.0

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-coverage-5.5-to-7.2.3

2 years, 3 months ago

53dbf182

Update coverage from 5.5 to 7.2.3

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.