Package: python-paramiko
Version: 1.7.7.1-3
Severity: normal
paramiko has no way suiteable to store keys
in ~/.ssh/known_hosts. While it has two ways
(HostKeys.save, SSHClient.save_host_keys) to
write things to a file, those are not suiteable
for this, as they destory the existing content
(comments, anything paramiko does not understand,
...), as opposed to the standard way of just
appending a line with the new information.
This means applications using paramiko cannot
participate in storing host keys, which severly
weakens ssh security.
Bernhard R. Link
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]