Test Kennung:	1.3.6.1.4.1.25623.1.0.131289
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2016-0163)
Zusammenfassung:	The remote host is missing an update for the 'ansible' package(s) announced via the MGASA-2016-0163 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ansible' package(s) announced via the MGASA-2016-0163 advisory. Vulnerability Insight: Updated ansible package fixes security vulnerability: A vulnerability in lxc_container, ansible module, was found allowing to get root inside the container. The problem is in the create_script function, which tries to write to /opt/.lxc-attach-script inside of the container. If the attacker can write to /opt/.lxc-attach-script before that, he can overwrite arbitrary files or execute commands as root (CVE-2016-3096). Affected Software/OS: 'ansible' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3096 FEDORA-2016-28ff51a3f5 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html FEDORA-2016-65519440f5 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html FEDORA-2016-679c4ddd3c http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html FEDORA-2016-ab154c56dd http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html FEDORA-2016-cd3cf8e7d0 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html GLSA-201607-14 https://security.gentoo.org/glsa/201607-14 [ansible-announce] 20160415 Ansible 1.9.6-1 has been released https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig [ansible-announce] 20160419 Ansible 2.0.2.0 has been released https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0 https://bugzilla.redhat.com/show_bug.cgi?id=1322925 https://github.com/ansible/ansible-modules-extras/pull/1941 https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4 https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.