Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2018-16876

Source

Debian Bug report logs - #916102
ansible: CVE-2018-16876: Information disclosure in vvv+ mode with no_log on

Package: src:ansible; Maintainer for src:ansible is Harlan Lieberman-Berg <hlieberman@debian.org>;

Reported by: Salvatore Bonaccorso <carnil@debian.org>

Date: Mon, 10 Dec 2018 08:15:06 UTC

Severity: serious

Tags: fixed-upstream, patch, security, upstream

Found in version ansible/2.7.1+dfsg-2

Fixed in version ansible/2.7.6+dfsg-1

Done: Salvatore Bonaccorso <carnil@debian.org>

Bug is archived. No further changes may be made.

Forwarded to https://github.com/ansible/ansible/pull/49569

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, carnil@debian.org, team@security.debian.org, team@security.debian.org, Harlan Lieberman-Berg <hlieberman@debian.org>:
Bug#916102; Package src:ansible. (Mon, 10 Dec 2018 08:15:09 GMT) (full text, mbox, link).

Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
New Bug report received and forwarded. Copy sent to carnil@debian.org, team@security.debian.org, team@security.debian.org, Harlan Lieberman-Berg <hlieberman@debian.org>. (Mon, 10 Dec 2018 08:15:09 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

Source: ansible
Version: 2.7.1+dfsg-2
Severity: important
Tags: patch security upstream
Forwarded: https://github.com/ansible/ansible/pull/49569

Hi,

The following vulnerability was published for ansible.

CVE-2018-16876[0]:
Information disclosure in vvv+ mode with no_log on

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-16876
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
[1] https://github.com/ansible/ansible/pull/49569

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Added tag(s) fixed-upstream. Request was from debian-bts-link@lists.debian.org to control@bugs.debian.org. (Thu, 13 Dec 2018 17:45:19 GMT) (full text, mbox, link).

Severity set to 'serious' from 'important' Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 20 Feb 2019 08:17:00 GMT) (full text, mbox, link).

Marked as fixed in versions ansible/2.7.6+dfsg-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 20 Feb 2019 08:21:08 GMT) (full text, mbox, link).

Marked Bug as done Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 20 Feb 2019 08:21:09 GMT) (full text, mbox, link).

Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Wed, 20 Feb 2019 08:21:09 GMT) (full text, mbox, link).

Message sent on to Salvatore Bonaccorso <carnil@debian.org>:
Bug#916102. (Wed, 20 Feb 2019 08:21:14 GMT) (full text, mbox, link).

Message #18 received at 916102-submitter@bugs.debian.org (full text, mbox, reply):

close 916102 2.7.6+dfsg-1
thanks

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 01 Apr 2019 07:24:52 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 13:15:40 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ansible: CVE-2018-16876: Information disclosure in vvv+ mode with no_log on

Debian Bug report logs - #916102
ansible: CVE-2018-16876: Information disclosure in vvv+ mode with no_log on

Vulmon Search

About

Products

Connect

ansible: CVE-2018-16876: Information disclosure in vvv+ mode with no_log on

Debian Bug report logs - #916102 ansible: CVE-2018-16876: Information disclosure in vvv+ mode with no_log on

Vulmon Search

About

Products

Connect

Debian Bug report logs - #916102
ansible: CVE-2018-16876: Information disclosure in vvv+ mode with no_log on