Paths

Table of Contentst

Differential D1531

Update ansible to 2.4.2.0 to address CVE-2017-7550
ClosedPublic
Actions

Authored by mcritchlow on Dec 2 2017, 5:29 PM.

Tags

Referenced Files

	F11047013: D1531.id3790.diff
	Thu, Aug 10, 2:35 PM

	F11047012: D1531.id.diff
	Thu, Aug 10, 2:35 PM

	F11047011: D1531.id3759.diff
	Thu, Aug 10, 2:35 PM

	F11032719: D1531.diff
	Wed, Aug 9, 2:45 PM

	F10863451: D1531.id3790.diff
	Jun 17 2023, 2:26 AM

	F10863449: D1531.id.diff
	Jun 17 2023, 2:26 AM

	F10775931: D1531.id.diff
	May 23 2023, 2:45 AM

	F10765741: D1531.diff
	May 19 2023, 2:53 PM

View All 10 Files

Subscribers

None

Details

Reviewers

Group Reviewers

Commits

R360:f13f76a6ff18: Update ansible to 2.4.2.0 to address CVE-2017-7550

Summary

Security fix for CVE-2017-7550 the jenkins_plugin module was logging the jenkins server password if the url_password was passed via the params field
Fix openssl_certificate's csr handling
Keep hosts in play vars if inside of a rescue task
Fix wait_for module to treat broken connections as unready so that the connection continues to be retried
Full CHANGELOG

Test Plan

Install locally and confirm version
Run project that include usage of ansible-vault ansible-playbook
All worked as expected

Diff Detail

Repository

Branch

master

Lint

No Lint Coverage

Unit

No Test Coverage

Event Timeline

mcritchlow created this revision.Dec 2 2017, 5:29 PM

Herald added a reviewer: Triage Team. · View Herald TranscriptDec 2 2017, 5:29 PM

JoshStrobl accepted this revision.Dec 4 2017, 9:51 PM

JoshStrobl added a project: Restricted Project.

This revision is now accepted and ready to land.Dec 4 2017, 9:51 PM

Closed by commit R360:f13f76a6ff18: Update ansible to 2.4.2.0 to address CVE-2017-7550 (authored by mcritchlow, committed by JoshStrobl). · Explain WhyDec 4 2017, 9:52 PM

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

6 lines

pspec_x86_64.xml

32 lines

Diff 3759

package.yml

Loading...

pspec_x86_64.xml

Loading...