advisories/24065.adv

type: security
subject: Updated ansible package fixes security vulnerability
CVE:
 - CVE-2018-16876
src:
  6:
   core:
     - ansible-2.4.6.0-1.2.mga6
description: |
  It was found that when a retry task in ansible run with -vvv fails, it
  will log the raw return code, stdout and stderr from ssh which could
  have contained sensitive data (CVE-2018-16876).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24065
 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZDHLHZ5V5K5AKBTGPLGFTPK3YNSOC4FY/
ID: MGASA-2019-0023
1	type: security
2	subject: Updated ansible package fixes security vulnerability
3	CVE:
4	- CVE-2018-16876
5	src:
6	6:
7	core:
8	- ansible-2.4.6.0-1.2.mga6
9	description: \|
10	It was found that when a retry task in ansible run with -vvv fails, it
11	will log the raw return code, stdout and stderr from ssh which could
12	have contained sensitive data (CVE-2018-16876).
13	references:
14	- https://bugs.mageia.org/show_bug.cgi?id=24065
15	- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZDHLHZ5V5K5AKBTGPLGFTPK3YNSOC4FY/
16	ID: MGASA-2019-0023