ansible: two vulnerabilities
| Package(s): | ansible | CVE #(s): | CVE-2015-3908 | ||||||||||||||||||||
| Created: | July 6, 2015 | Updated: | August 31, 2015 | ||||||||||||||||||||
| Description: | From the Fedora advisory:
Update to 1.9.2. Fixes CVE-2015-3908 (hostname and cert matching in some modules and plugins) and another not yet issued CVE on chroot/jail/zone connection plugins as well as a number of bugfixes. A bit more information can be found on the Ansible security page: CVE-2015-3908 - Ensure that hostnames match certificate names when using HTTPS - resolved in Ansible 1.9.2 Number pending - Improprer symlink handling in zone, jail, and chroot connection plugins could lead to escape from confined environment - resolved in Ansible 1.9.2 | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||