Fedora Update for python-paramiko FEDORA-2018-c1769746da

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for python-paramiko FEDORA-2018-6db2f7a02e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : python-paramiko (openSUSE-2018-305)

This update for python-paramiko fixes the following issues : - CVE-2018-7750: Fixed transport.py in the SSH server implementation of Paramiko that does not properly check whether authentication is completed before processing other requests bsc1085276. %NASLMINLEVEL 70300 C Tenable Network Securit...

openSUSE: Security Advisory for python-paramiko (openSUSE-SU-2018:0799-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for python-paramiko (important)

This update for python-paramiko fixes the following issues: - CVE-2018-7750: Fixed transport.py in the SSH server implementation of Paramiko that does not properly check whether authentication is completed before processing other requests bsc1085276...

Ubuntu: Security Advisory (USN-3603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

athena (>=0.5.0, <=0.8.0), django-fab-deployer (>=0.0.4, <=0.0.11) +4 more potentially affected by CVE-2018-7750 via paramiko (>=1.15.0, <=1.15.4)

paramiko PYPI version =1.15.0, =0.5.0, =0.0.4, =0.1.0, =0.1.0, =0.51.0, =0.52.0 - streamlocal 0.0.0 Source cves: CVE-2018-7750 Source advisory: OSV:PYSEC-2018-19...

CVE-2018-7750

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as...

django-sftp (0.1.0), hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2018-7750 via paramiko (2.2.1)

paramiko PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp 0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-7750 Source advisory: OSV:PYSEC-2018-19...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: MEND:CVE-2018-7750...

django-sftp (0.1.0), hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2018-7750 via paramiko (2.2.1)

paramiko PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp 0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-7750 Source advisory: MEND:CVE-2018-7750...

chaosmonkey (>=1.0.8, <=1.1.0), cloudmesh-client (>=4.5.0, <=4.7.3) +2 more potentially affected by CVE-2018-7750 via paramiko (>=2.1.1, <=2.1.2)

paramiko PYPI version =2.1.1, =1.0.8, =4.5.0, =0.8.0, =0.9.0 - marvin-python-toolbox 0.0.4 Source cves: CVE-2018-7750 Source advisory: MEND:CVE-2018-7750...

CVE-2018-7750

CVE-2018-7750 affects Paramiko’s SSH server transport.py: before fixes, it did not verify that authentication completed before processing other requests (e.g., channel-open), enabling a customized SSH client to bypass authentication. Affected series include 1.17.6 and earlier in 1.x, 1.18.x befor...

CVE-2018-7750

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as...

CVE-2018-7750

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as...

Updated iceape packages fix security vulnerabilities

Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...

tudocelular.com XSS vulnerability

Vulnerable URL: https://www.tudocelular.com/newfiles/adserver/adsensepanorama.php?adslot=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

[SECURITY] [DSA 3918-1] icedove/thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3918-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2017 https://www.debian.org/security/faq -...

EulerOS 2.0 SP2 : firefox (EulerOS-SA-2017-1127)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...

Ubuntu: Security Advisory (USN-3321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...