Security Bulletin: A security vulnerability has been identified in paramiko shipped with IBM Cloud Manager with OpenStack (CVE-2018-7750)

Summary

Paramiko is shipped as a component of IBM Cloud Manager with Openstack. This vulnerability cannot be exploited as IBM Cloud Manager with OpenStack only uses Paramiko client. Information about a security vulnerability affecting Paramiko has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin RHSA-2018:0591 - Security Advisory for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—

IBM Cloud Manager with OpenStack 4.3.0| python-paramiko 1.13.1-3.ibm.el7.noarch

IBM Cloud Manager with OpenStack 4.2.0| python-paramiko-1.13.1-3.ibm.el6.noarch

IBM Cloud Manager with OpenStack 4.1.0| python-paramiko-1.11.3-3.ibm.el6.noarch

As this vulnerability cannot be exploited, you do not have to update the package.

br>

Workarounds and Mitigations

None