FEDORA-2018-53790a5236 — security update for ansible

stable

ansible-2.6.1-1.fc27

FEDORA-2018-53790a5236 created by kevin 8 years ago for Fedora 27

Update to ansible 2.6.1 bugfix release. Fixes also 2 CVEs: CVE-2018-10874 and CVE-2018-10875

See https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst for full list of changes.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-53790a5236

This update has been submitted for testing by kevin.

8 years ago

This update has been pushed to testing.

8 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for batched by kevin.

8 years ago

This update has been submitted for stable by kevin.

8 years ago

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

ansible-2.6.1-1.fc27

BZ#1598602 ansible-2.6.1 is available

BZ#1598805 CVE-2018-10875 ansible: ansible.cfg is being read from current working directory allowing possible code execution [fedora-all]

BZ#1598806 CVE-2018-10875 ansible: ansible.cfg is being read from current working directory allowing possible code execution [epel-all]

BZ#1598809 CVE-2018-10874 ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution [fedora-all]

BZ#1598810 CVE-2018-10874 ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution [epel-all]

ansible-2.6.1-1.fc27

Automated Test Results

ignored