ALT-PU-2015-1579: package ansible update to version 1.9.2-alt1
Описание
This update upgrades ansible to version 1.9.2-alt1.
Устраненные уязвимости2
Ссылки3
Связанные уязвимости
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
The chroot, jail, and zone connection plugins in ansible before 1.9.2 ...
Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.