Security update for python-paramiko
SUSE Security Update: Security update for python-paramiko
Announcement ID: | SUSE-SU-2018:1971-1 |
Rating: | important |
References: | #1085276 |
Affected Products: |
An update that fixes one vulnerability is now available.
Description:
This update for python-paramiko fixes the following issues:
- CVE-2018-7750: transport.py in the SSH server implementation of Paramiko
did not properly check whether authentication is completed processing
other requests. A customized SSH client could have skipped the
authentication step (bsc#1085276)
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Module for Public Cloud 12:
zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2018-1329=1
Package List:
- SUSE Linux Enterprise Module for Public Cloud 12 (noarch):
- python-paramiko-1.15.2-2.9.1