Overview

Request 962966 accepted

- Add patches (0001-Fix-CVE-re-PKey.write_private_key-chmod-race.patch
and 0001-Use-args-not-kwargs-to-retain-py2-compat-for-now.patch) to
ensure that we create new key files directly with a user-only mode,
instead of opening, writing, then chmodding. bsc#1197279,CVE-2022-24302


Request History
Guang Yee's avatar

yeey created request

- Add patches (0001-Fix-CVE-re-PKey.write_private_key-chmod-race.patch
and 0001-Use-args-not-kwargs-to-retain-py2-compat-for-now.patch) to
ensure that we create new key files directly with a user-only mode,
instead of opening, writing, then chmodding. bsc#1197279,CVE-2022-24302


Fergal Mc Carthy's avatar

fmccarthy accepted request

Looks good.

openSUSE Build Service is sponsored by