FEDORA-2018-1d2bc76093 — security update for ansible

stable

ansible-2.6.1-1.fc28

FEDORA-2018-1d2bc76093 created by kevin 8 years ago for Fedora 28

Update to ansible 2.6.1 bugfix release. Fixes also 2 CVEs: CVE-2018-10874 and CVE-2018-10875

See https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst for full list of changes.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-1d2bc76093

This update has been submitted for testing by kevin.

8 years ago

This update has been pushed to testing.

8 years ago

mzink commented & provided feedback 8 years ago

karma

Works for me

chr77 commented & provided feedback 8 years ago

karma

Works for me. No regressions noted compared to previous version.

kparal commented & provided feedback 8 years ago

karma

works in my local testing when executed through taskotron

This update has been submitted for batched by bodhi.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

ansible-2.6.1-1.fc28

BZ#1598602 ansible-2.6.1 is available

BZ#1598805 CVE-2018-10875 ansible: ansible.cfg is being read from current working directory allowing possible code execution [fedora-all]

BZ#1598806 CVE-2018-10875 ansible: ansible.cfg is being read from current working directory allowing possible code execution [epel-all]

BZ#1598809 CVE-2018-10874 ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution [fedora-all]

BZ#1598810 CVE-2018-10874 ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution [epel-all]

ansible-2.6.1-1.fc28

Automated Test Results

ignored