potiuk commented on issue #22194:
URL: https://github.com/apache/airflow/issues/22194#issuecomment-1065732245


   You are free to downgrade to earlier paramiko version. Current limitation of 
SSH Provider is `paramiko>=2.6.0`  - the fact that paramiko >=2.9.0 does not 
accept your key is likely for a good reason (security) and if you choose to 
continue using version that is older (and might contain some security 
vulnerabilities) rather than upgrading your key you can still do it.
   
   Follow the examples here:
   
   
https://airflow.apache.org/docs/docker-stack/build.html#example-of-upgrading-airflow-provider-packages
   
   You can build your own image using this Dockerfile (feel free to do it)
   
   ```
   FROM apache/airflow:2.2.4
   RUN pip install --no-cache-dir paramiko<2.9.0
   ```
   
   Expecting that newer version of Airflow is using an older and potentially 
vulnerable version of a dependency is a bit selfish.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to