ansible-collections/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2025-10-22 03:53:59 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add changelog fragments for this collection from ansible/ansible. (#156)

Browse source
This commit is contained in:
Felix Fontein 2020-04-13 09:14:50 +02:00 • committed by GitHub
commit fab6b980d2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
159 changed files with 372 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
changelogs/fragments/solaris_zone_name_fix.yml Normal file
View file

@ -0,0 +1,5 @@
bugfixes:
- "**SECURITY** - CVE-2019-14904 - solaris_zone module accepts zone name and performs actions related to that.
However, there is no user input validation done while performing actions. A malicious user could provide a
crafted zone name which allows executing commands into the server manipulating the module behaviour. Adding
user input validation as per Solaris Zone documentation fixes this issue."