ALT-PU-2017-1386: package ansible update to version 2.2.2.0-alt1
Описание
This update upgrades ansible to version 2.2.2.0-alt1.
Устраненные уязвимости4
Ссылки5
GHSA-cmwx-9m2h-x7v4
https://github.com/advisories/GHSA-cmwx-9m2h-x7v4GHSA-jg4f-jqm5-4mgq
https://github.com/advisories/GHSA-jg4f-jqm5-4mgqGHSA-m956-frf4-m2wr
https://github.com/advisories/GHSA-m956-frf4-m2wrGHSA-x4cm-m36h-c6qj
https://github.com/advisories/GHSA-x4cm-m36h-c6qjСвязанные уязвимости
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
A flaw was found in Ansible before version 2.2.0. The apt_key module d ...