This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-8647 →

DEBIAN-CVE-2016-8647

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain ci...

Original description

The description as published by the source.

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 ansible

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-4"}]}]

Debian:13 ansible

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-4"}]}]

Debian:14 ansible

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-4"}]}]

References

advisory security-tracker.debian.org