shield Security update for python-dulwich
SUSE-SLE-Module-Public-Cloud-12-2018-1382


This update for python-dulwich to version 0.18.5 fixes this security issue: - CVE-2017-16228: Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname (bsc#1066430). For detailed changes please see https://www.dulwich.io/code/dulwich/

  • Release Date
    Jul 24 2018
  • References
    Bugzilla: 1066430
    CVEs: CVE-2017-16228
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Public Cloud Module 12 aarch64
  • Packages
    python-dulwich
    Pure-Python Git Library
    0.18.5-4.3.1 lock rpm lock src
Public Cloud Module 12 ppc64le
  • Packages
    python-dulwich
    Pure-Python Git Library
    0.18.5-4.3.1 lock rpm lock src
Public Cloud Module 12 s390x
  • Packages
    python-dulwich
    Pure-Python Git Library
    0.18.5-4.3.1 lock rpm lock src
Public Cloud Module 12 x86_64
  • Packages
    python-dulwich
    Pure-Python Git Library
    0.18.5-4.3.1 lock rpm lock src