Advisories ยป MGASA-2018-0445

Updated python-dulwich packages fix security vulnerability

Publication date: 11 Nov 2018
Modification date: 11 Nov 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2017-16228

Description

Dulwich, when an SSH subprocess is used, allowed remote attackers to
execute arbitrary commands via an ssh URL with an initial dash character
in the hostname (CVE-2017-16228).
                

References

SRPMS

6/core