Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0038-1

Опубликовано: 07 янв. 2021
Источник: suse-cvrf

Описание

Security update for python-paramiko

This update for python-paramiko fixes the following issue:

  • CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151).

Список пакетов

Image SLES12-SP4-Azure-BYOS
python3-paramiko-2.1.3-9.6.1
Image SLES12-SP4-SAP-Azure
python3-paramiko-2.1.3-9.6.1
Image SLES12-SP4-SAP-Azure-BYOS
python3-paramiko-2.1.3-9.6.1
Image SLES12-SP5-Azure-Basic-On-Demand
python3-paramiko-2.1.3-9.6.1
SUSE Linux Enterprise Module for Public Cloud 12
python-paramiko-2.1.3-9.6.1
python3-paramiko-2.1.3-9.6.1

Ссылки

Описание

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

Затронутые продукты
Image SLES12-SP4-Azure-BYOS:python3-paramiko-2.1.3-9.6.1
Image SLES12-SP4-SAP-Azure-BYOS:python3-paramiko-2.1.3-9.6.1
Image SLES12-SP4-SAP-Azure:python3-paramiko-2.1.3-9.6.1
Image SLES12-SP5-Azure-Basic-On-Demand:python3-paramiko-2.1.3-9.6.1
Ссылки