Security update for python-dulwich (moderate)

2018-08-0615:16:15

lists.opensuse.org

0.004 Low

EPSS

Percentile

69.2%

JSON

This update for python-dulwich to version 0.18.5 fixes this security issue:

CVE-2017-16228: Dulwich, when an SSH subprocess is used, allowed remote
attackers to execute arbitrary commands via an ssh URL with an initial
dash character in the hostname (bsc#1066430).

For detailed changes please see <a href=“https://www.dulwich.io/code/dulwich/”>https://www.dulwich.io/code/dulwich/</a>

This update was imported from the SUSE:SLE-12:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3x86_64python-dulwich< 0.18.5-11.1python-dulwich-0.18.5-11.1.x86_64.rpm
openSUSE Leap42.3x86_64python-dulwich-debugsource< 0.18.5-11.1python-dulwich-debugsource-0.18.5-11.1.x86_64.rpm
openSUSE Leap42.3i586python-dulwich< 0.18.5-11.1python-dulwich-0.18.5-11.1.i586.rpm
openSUSE Leap42.3i586python-dulwich-debugsource< 0.18.5-11.1python-dulwich-debugsource-0.18.5-11.1.i586.rpm
openSUSE Leap42.3x86_64python-dulwich-debuginfo< 0.18.5-11.1python-dulwich-debuginfo-0.18.5-11.1.x86_64.rpm
openSUSE Leap42.3i586python-dulwich-debuginfo< 0.18.5-11.1python-dulwich-debuginfo-0.18.5-11.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	x86_64	python-dulwich	< 0.18.5-11.1	python-dulwich-0.18.5-11.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	python-dulwich-debugsource	< 0.18.5-11.1	python-dulwich-debugsource-0.18.5-11.1.x86_64.rpm
openSUSE Leap	42.3	i586	python-dulwich	< 0.18.5-11.1	python-dulwich-0.18.5-11.1.i586.rpm
openSUSE Leap	42.3	i586	python-dulwich-debugsource	< 0.18.5-11.1	python-dulwich-debugsource-0.18.5-11.1.i586.rpm
openSUSE Leap	42.3	x86_64	python-dulwich-debuginfo	< 0.18.5-11.1	python-dulwich-debuginfo-0.18.5-11.1.x86_64.rpm
openSUSE Leap	42.3	i586	python-dulwich-debuginfo	< 0.18.5-11.1	python-dulwich-debuginfo-0.18.5-11.1.i586.rpm