CVE-2015-6240
Fixed in a distro release EPSS <1%
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
Products: redhat ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 1.9.2 |
| PyPI | ansible | ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b |
| PyPI | ansible | 952166f48eb0f5797b75b160fd156bbe1e8fc647 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ansible | 1.9.2+dfsg-1 |
| Debian 13 | ansible | 1.9.2+dfsg-1 |
| Debian 14 | ansible | 1.9.2+dfsg-1 |
| Debian 8 | ansible | 1.7.2+dfsg-2+deb8u2 |
| Ubuntu Pro 14.04 LTS | ansible | 1.5.4+dfsg-1ubuntu0.1~esm3 |
| Ubuntu Pro 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.3+esm5 |
| Ubuntu Pro 18.04 LTS | ansible | 2.5.1+dfsg-1ubuntu0.1+esm5 |
| Ubuntu Pro 20.04 LTS | ansible | 2.9.6+dfsg-1ubuntu0.1~esm3 |