diff options
| author | ak2k <19240940+ak2k@users.noreply.github.com> | 2025-07-02 18:14:07 -0400 |
|---|---|---|
| committer | ak2k <19240940+ak2k@users.noreply.github.com> | 2025-07-02 18:14:07 -0400 |
| commit | 84cd68f55584b684e122457d58e169ca69d008a6 (patch) | |
| tree | 66d737d87890ab8a99457774996965b731dfaf6b /pkgs/development/python-modules/rangehttpserver | |
| parent | 5a7fb8413774b4b3f2045738ea22fde0e8cb00bc (diff) | |
litestream: fix CVE-2024-41254 by adding SSH host key verification
Apply patch from upstream commit f6c859061bfd7ccc2a21fcde3e9f0eb9ad98cd5e
by benbjohnson that adds optional SSH host key verification to SFTP
connections. This addresses CVE-2024-41254 where InsecureIgnoreHostKey()
was used unconditionally, allowing potential MITM attacks.
The patch adds a new `host-key-path` configuration option that allows
users to specify a file containing the SSH host key for verification.
When not specified, it maintains backward compatibility by falling back
to the insecure behavior.
Fixes: #388411
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions