Test ID:	1.3.6.1.4.1.25623.1.0.131289
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0163)
Summary:	The remote host is missing an update for the 'ansible' package(s) announced via the MGASA-2016-0163 advisory.
Description:	Summary: The remote host is missing an update for the 'ansible' package(s) announced via the MGASA-2016-0163 advisory. Vulnerability Insight: Updated ansible package fixes security vulnerability: A vulnerability in lxc_container, ansible module, was found allowing to get root inside the container. The problem is in the create_script function, which tries to write to /opt/.lxc-attach-script inside of the container. If the attacker can write to /opt/.lxc-attach-script before that, he can overwrite arbitrary files or execute commands as root (CVE-2016-3096). Affected Software/OS: 'ansible' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3096 FEDORA-2016-28ff51a3f5 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html FEDORA-2016-65519440f5 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html FEDORA-2016-679c4ddd3c http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html FEDORA-2016-ab154c56dd http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html FEDORA-2016-cd3cf8e7d0 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html GLSA-201607-14 https://security.gentoo.org/glsa/201607-14 [ansible-announce] 20160415 Ansible 1.9.6-1 has been released https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig [ansible-announce] 20160419 Ansible 2.0.2.0 has been released https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0 https://bugzilla.redhat.com/show_bug.cgi?id=1322925 https://github.com/ansible/ansible-modules-extras/pull/1941 https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4 https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.