Bump paramiko from 2.11.0 to 3.4.0

Bumps [paramiko](https://github.com/paramiko/paramiko) from 2.11.0 to 3.4.0. - [Commits](paramiko/paramiko@2.11.0...3.4.0) --- updated-dependencies: - dependency-name: paramiko dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Cray-HPE · Jan 5, 2024 · b0621f1 · b0621f1
1 parent 3b37a8d
commit b0621f1
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -25,6 +25,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.27.1] - 2024-01-05
+
+### Security
+- Update the version of paramiko from 2.11.0 to 3.4.0 to address
+  CVE-2023-48795
+
 ## [3.27.0] - 2023-12-05
 
 ### Added

diff --git a/requirements-dev.lock.txt b/requirements-dev.lock.txt
@@ -36,7 +36,7 @@ natsort==8.1.0
 nose2==0.12.0
 oauthlib==3.2.2
 packaging==21.3
-paramiko==2.11.0
+paramiko==3.4.0
 parsec==3.5
 prettytable==0.7.2
 pyasn1==0.4.8

diff --git a/requirements.lock.txt b/requirements.lock.txt
@@ -29,7 +29,7 @@ marshmallow-enum==1.5.1
 mypy-extensions==0.4.3
 natsort==8.1.0
 oauthlib==3.2.2
-paramiko==2.11.0
+paramiko==3.4.0
 parsec==3.5
 prettytable==0.7.2
 pyasn1==0.4.8