Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-05-05T23:50:52 paramiko: Paramiko: Data integrity could be compromised due to SHA-1 algorithm use 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CWE-328

A flaw was found in Paramiko, a Python implementation of the SSHv2 protocol. The `rsakey.py` module allows the use of the SHA-1 cryptographic hash algorithm, which is known to have security weaknesses. An attacker on the same local network, with significant effort, could potentially exploit this to achieve a limited compromise of data integrity.

Migration Toolkit for Containers Fix deferred rhmtc/openshift-migration-hook-runner-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/ee-minimal-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/ee-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/ee-supported-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/platform-resource-runner-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ansible-dev-tools-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ee-minimal-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ee-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ee-supported-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/platform-resource-runner-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/ansible-dev-tools-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/ee-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/platform-resource-runner-rhel9 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform/ee-minimal-rhel8 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform/ee-minimal-rhel9 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform-tech-preview/ee-minimal-rhel8 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform-tech-preview/ee-minimal-rhel9 Red Hat Discovery 2 Fix deferred discovery/discovery-server-rhel9 Red Hat Enterprise Linux 6 Under investigation python-paramiko Red Hat Enterprise Linux 7 Under investigation python-paramiko Red Hat Enterprise Linux 9 Fix deferred rhel9/bootc-image-builder Red Hat Hardened Images Not affected mariadb11.8 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-openvino-model-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-dpu-intel-ipu-p4sdk-rhel9 Red Hat OpenStack Platform 16.2 Under investigation python-paramiko Red Hat OpenStack Platform 17.1 Under investigation python-paramiko Red Hat OpenStack Platform 18.0 Under investigation python-paramiko Red Hat OpenStack Platform 18.0 Fix deferred rhoso-operators/ee-openstack-ansible-ee-rhel9 Red Hat Satellite 6 Fix deferred satellite/iop-advisor-engine-rhel9 Red Hat Satellite 6 Fix deferred satellite/iop-insights-engine-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-44405 https://nvd.nist.gov/vuln/detail/CVE-2026-44405 https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf