Package: python-paramiko
Version: 1.7.7.1-3
Severity: normal

paramiko has no way suiteable to store keys
in ~/.ssh/known_hosts. While it has two ways
(HostKeys.save, SSHClient.save_host_keys) to
write things to a file, those are not suiteable
for this, as they destory the existing content
(comments, anything paramiko does not understand,
...), as opposed to the standard way of just
appending a line with the new information.

This means applications using paramiko cannot
participate in storing host keys, which severly
weakens ssh security.

        Bernhard R. Link


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to