File _patchinfo of Package patchinfo.8822

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.8822

<patchinfo incident="8822">
  <issue tracker="bnc" id="1085276">CVE-2018-7750: python-paramiko: transport.py in the SSH server implementation does not properly check whether authentication is completed before processing other requests</issue>
  <issue tracker="bnc" id="1106148">bug in python-paramiko-1.15.2-2.3.2.noarch</issue>
  <issue tracker="cve" id="2018-7750"/>
  <category>security</category>
  <rating>important</rating>
  <packager>glaubitz</packager>
  <description>This update for python-paramiko to version 1.18.5 fixes the following issues:

This security issue was fixed:

- CVE-2018-7750: transport.py in the SSH server implementation of Paramiko did
  not properly check whether authentication is completed processing other
  requests. A customized SSH client could have skipped the authentication step
  (bsc#1085276)

This non-security issue was fixed:

- Prevent connection problems with ssh servers due to no acceptable macs being
  available (bsc#1106148)

For additional changes please check the changelog.</description>
  <summary>Security update for python-paramiko</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.8822

Places