Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:0174-1

Опубликовано: 25 янв. 2019
Источник: suse-cvrf

Описание

Security update for python-paramiko

This update for python-paramiko to version 2.4.2 fixes the following issues:

Security issue fixed:

  • CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)

Non-security issue fixed:

  • Disable experimental gssapi support (bsc#1115769)

Список пакетов

Image SLES15-Azure-BYOS
python3-paramiko-2.4.2-3.3.2
Image SLES15-EC2-HVM-BYOS
python3-paramiko-2.4.2-3.3.2
Image SLES15-SAP-Azure
python3-paramiko-2.4.2-3.3.2
Image SLES15-SAP-Azure-BYOS
python3-paramiko-2.4.2-3.3.2
Image SLES15-SAP-EC2-HVM
python3-paramiko-2.4.2-3.3.2
Image SLES15-SAP-EC2-HVM-BYOS
python3-paramiko-2.4.2-3.3.2
SUSE Linux Enterprise Module for Basesystem 15
python2-paramiko-2.4.2-3.3.2
SUSE Linux Enterprise Module for Public Cloud 15
python3-paramiko-2.4.2-3.3.2

Ссылки

Описание

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

Затронутые продукты
Image SLES15-Azure-BYOS:python3-paramiko-2.4.2-3.3.2
Image SLES15-EC2-HVM-BYOS:python3-paramiko-2.4.2-3.3.2
Image SLES15-SAP-Azure-BYOS:python3-paramiko-2.4.2-3.3.2
Image SLES15-SAP-Azure:python3-paramiko-2.4.2-3.3.2
Ссылки