Red Hat Bug Fix Advisory: rhvm-appliance security, bug fix, and enhancement update

Fixed packages 1

Vulnerabilities 1

• High 8.8
  CVE-2018-1000805

  Paramiko Authentication Bypass vulnerability

  Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

  paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI
  Oct 8, 2018

References

• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625894
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635987
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636387
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3497.json
• report
  https://access.redhat.com/security/cve/CVE-2018-1000805
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1637263
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1000805
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1000805