[SECURITY] Fedora 28 Update: ansible-2.7.8-1.fc28

🗓️ 03 Mar 2019 03:24:34Reported by FedoraType

fedora🔗 lists.fedoraproject.org👁 39 Views

Ansible update for Fedora 2

Reporter	Title	Published	Views	Family All 301
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Ansible shipped with Data Science Experience Local	12 Feb 201917:20	–	ibm
AlpineLinux	CVE-2018-10855	2 Jul 201818:00	–	alpinelinux
AlpineLinux	CVE-2018-10875	13 Jul 201822:00	–	alpinelinux
AlpineLinux	CVE-2019-3828	27 Mar 201900:00	–	alpinelinux
BDU FSTEC	The vulnerability of the Ansible configuration management system lies in the lack of control over the path used to locate the configuration file ansible.cfg, which allows a attacker to execute arbitrary code.	7 Feb 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ansible configuration management system, related to the incorrect handling of the “no_log” option, allows a perpetrator to gain unauthorized access to sensitive information.	6 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fetch module in the Ansible configuration management system arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to gain unauthorized access to information and compromise its integrity.	25 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ansible configuration management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.	13 Aug 201900:00	–	bdu_fstec
CNVD	Ansible Arbitrary Code Execution Vulnerability (CNVD-2018-12548)	4 Jul 201800:00	–	cnvd
CNVD	Ansible Information Disclosure Vulnerability (CNVD-2018-12556)	5 Jul 201800:00	–	cnvd