Описание
Security update for python-paramiko
This update for python-paramiko to version 2.4.2 fixes the following issues:
Security issue fixed:
- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)
Non-security issue fixed:
- Disable experimental gssapi support (bsc#1115769)
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
python-paramiko-doc-2.4.2-lp150.2.3.1
python2-paramiko-2.4.2-lp150.2.3.1
python3-paramiko-2.4.2-lp150.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:0129-1
- SUSE Security Ratings
- SUSE Bug 1111151
- SUSE Bug 1115769
- SUSE Bug 1121846
- SUSE CVE CVE-2018-1000805 page
Описание
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
Затронутые продукты
openSUSE Leap 15.0:python-paramiko-doc-2.4.2-lp150.2.3.1
openSUSE Leap 15.0:python2-paramiko-2.4.2-lp150.2.3.1
openSUSE Leap 15.0:python3-paramiko-2.4.2-lp150.2.3.1
Ссылки
- CVE-2018-1000805
- SUSE Bug 1111151