Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-8647 →
DEBIAN-CVE-2016-8647
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain ci...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ansible
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-4"}]}]
Debian:13
ansible
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-4"}]}]
Debian:14
ansible
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-4"}]}]
Références
- advisory security-tracker.debian.org