Advisories » MGASA-2015-0292

Updated ansible package fixes security vulnerability

Publication date: 28 Jul 2015
Modification date: 28 Jul 2015
Type: security
Affected Mageia releases : 4 , 5
CVE: CVE-2015-3908

Description

Update to 1.9.2. Fixes CVE-2015-3908 (hostname and cert matching 
in some modules and plugins) and another not yet issued CVE on 
chroot/jail/zone connection plugins as well as a number of bugfixes.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16309
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3908

SRPMS

4/core

• ansible-1.9.2-1.mga4

5/core

• ansible-1.9.2-1.mga5