[SECURITY] [DLA 1556-1] paramiko security update

🗓️ 27 Oct 2018 15:41:18Reported by DebianType

debian

debian🔗 lists.debian.org👁 543 Views

Security update for Paramiko package versions 1.15.1-1+deb8u1, fixing CVE-2018-7750 and CVE-2018-100080

Reporter	Title	Published	Views	Family All 262
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product	15 Jul 202515:44	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Libvorbis, Patch and Python-paramiko vulnerabilities affect IBM Netezza Host Management	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in paramiko shipped with IBM Cloud Manager with OpenStack (CVE-2018-7750)	8 Aug 201804:13	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Python-paramiko vulnerability affects IBM Netezza Host Management.	18 Oct 201903:36	–	ibm
0day.today	Paramiko 2.4.1 - Authentication Bypass Exploit	29 Oct 201800:00	–	zdt
0day.today	Nutanix AOS & Prism < 5.5.5 (LTS) / < 5.8.1 (STS) SFTP Authentication Bypass Vulnerability	30 Oct 201800:00	–	zdt
GithubExploit	Exploit for Improper Authentication in Paramiko	6 Nov 201810:01	–	githubexploit
Amazon	Critical: python-paramiko	23 Oct 201800:00	–	amazon
Amazon	Critical: python-paramiko	5 Apr 201800:00	–	amazon
Tenable Nessus	Amazon Linux AMI : python-paramiko (ALAS-2018-1096)	25 Oct 201800:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	8	any	paramiko	1.15.1-1+deb8u1	paramiko_1.15.1-1+deb8u1_any.deb
Debian	8	any	paramiko-doc	1.15.1-1+deb8u1	paramiko-doc_1.15.1-1+deb8u1_any.deb
Debian	8	any	python-paramiko	1.15.1-1+deb8u1	python-paramiko_1.15.1-1+deb8u1_any.deb
Debian	8	any	python3-paramiko	1.15.1-1+deb8u1	python3-paramiko_1.15.1-1+deb8u1_any.deb

27 Oct 2018 15:41Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.27065

paramiko security update version 1.15.1-1+deb8u1 cve-2018-7750 cve-2018-1000805 debian 8 jessie