1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2024:0035-1

[SUSE-SU-2024:0035-1] Security update for python-paramiko

Severity Important
Affected Packages 6
CVEs 1
Info Packages References Vulnerabilities

Security update for python-paramiko

This update for python-paramiko fixes the following issues:

  • CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#bsc#1218168).

  • Update to 3.4.0.

Package Affected Version
pkg:rpm/suse/python311-paramiko?arch=noarch&distro=sles-15&sp=4 < 3.4.0-150400.13.6.1
pkg:rpm/suse/python311-paramiko?arch=noarch&distro=sled-15&sp=4 < 3.4.0-150400.13.6.1
pkg:rpm/suse/python311-paramiko?arch=noarch&distro=opensuse-leap-15.5 < 3.4.0-150400.13.6.1
pkg:rpm/suse/python-paramiko-doc?arch=noarch&distro=sles-15&sp=4 < 3.4.0-150400.13.6.1
pkg:rpm/suse/python-paramiko-doc?arch=noarch&distro=sled-15&sp=4 < 3.4.0-150400.13.6.1
pkg:rpm/suse/python-paramiko-doc?arch=noarch&distro=opensuse-leap-15.5 < 3.4.0-150400.13.6.1
ID
SUSE-SU-2024:0035-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2024/suse-su-20240035-1/
Published
2024-01-05T09:33:42
(8 months ago)
Modified
2024-01-05T09:33:42
(8 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/python311-paramiko?arch=noarch&distro=sles-15&sp=4 suse python311-paramiko < 3.4.0-150400.13.6.1 sles-15 noarch
Affected pkg:rpm/suse/python311-paramiko?arch=noarch&distro=sled-15&sp=4 suse python311-paramiko < 3.4.0-150400.13.6.1 sled-15 noarch
Affected pkg:rpm/suse/python311-paramiko?arch=noarch&distro=opensuse-leap-15.5 suse python311-paramiko < 3.4.0-150400.13.6.1 opensuse-leap-15.5 noarch
Affected pkg:rpm/suse/python-paramiko-doc?arch=noarch&distro=sles-15&sp=4 suse python-paramiko-doc < 3.4.0-150400.13.6.1 sles-15 noarch
Affected pkg:rpm/suse/python-paramiko-doc?arch=noarch&distro=sled-15&sp=4 suse python-paramiko-doc < 3.4.0-150400.13.6.1 sled-15 noarch
Affected pkg:rpm/suse/python-paramiko-doc?arch=noarch&distro=opensuse-leap-15.5 suse python-paramiko-doc < 3.4.0-150400.13.6.1 opensuse-leap-15.5 noarch
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date