Updated python-dulwich packages fix security vulnerability
Publication date: 11 Nov 2018Modification date: 11 Nov 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2017-16228
Description
Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname (CVE-2017-16228).
References
SRPMS
6/core
- python-dulwich-0.12.0-1.2.mga6