Red Hat Security AdvisoryRHSA-2018:3406
python-paramiko security update
Released 2018-10-30 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) python-paramiko-1.7.5-5.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) python-paramiko-1.7.5-5.el6_10
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) python-paramiko-1.7.5-4.el6_7.1
- Red Hat Enterprise Linux Server (v. 6) python-paramiko-1.7.5-5.el6_10
- Red Hat Enterprise Linux Server AUS (v. 6.4) python-paramiko-1.7.5-4.el6_4.1
- Red Hat Enterprise Linux Server AUS (v. 6.5) python-paramiko-1.7.5-4.el6_5.1
- Red Hat Enterprise Linux Server AUS (v. 6.6) python-paramiko-1.7.5-4.el6_6.1
- Red Hat Enterprise Linux Server EUS (v. 6.7) python-paramiko-1.7.5-4.el6_7.1
- Red Hat Enterprise Linux Server TUS (v. 6.6) python-paramiko-1.7.5-4.el6_6.1
- Red Hat Enterprise Linux Workstation (v. 6) python-paramiko-1.7.5-5.el6_10
Fixes 1 record
Priority MEDIUM 45
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04407 · Published 2018-10-08 · Partial fix · 2.4.2, 2.3.3 +3 CWE-863
