Ansible -- Templating engine bug

2021-06-1000:00:00

vuxml.freebsd.org

ansible

templating

bug

preserving

unsafe status

newlines

unix

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

Ansible developers report:

Templating engine fix for not preserving usnafe status
when trying to preserve newlines.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpy36-ansible-core< 2.11.2UNKNOWN
FreeBSDanynoarchpy37-ansible-core< 2.11.2UNKNOWN
FreeBSDanynoarchpy38-ansible-core< 2.11.2UNKNOWN
FreeBSDanynoarchpy39-ansible-core< 2.11.2UNKNOWN
FreeBSDanynoarchpy36-ansible-base< 2.10.11UNKNOWN
FreeBSDanynoarchpy37-ansible-base< 2.10.11UNKNOWN
FreeBSDanynoarchpy38-ansible-base< 2.10.11UNKNOWN
FreeBSDanynoarchpy39-ansible-base< 2.10.11UNKNOWN
FreeBSDanynoarchpy36-ansible2< 2.9.23UNKNOWN
FreeBSDanynoarchpy37-ansible2< 2.9.23UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	py36-ansible-core	< 2.11.2	UNKNOWN
FreeBSD	any	noarch	py37-ansible-core	< 2.11.2	UNKNOWN
FreeBSD	any	noarch	py38-ansible-core	< 2.11.2	UNKNOWN
FreeBSD	any	noarch	py39-ansible-core	< 2.11.2	UNKNOWN
FreeBSD	any	noarch	py36-ansible-base	< 2.10.11	UNKNOWN
FreeBSD	any	noarch	py37-ansible-base	< 2.10.11	UNKNOWN
FreeBSD	any	noarch	py38-ansible-base	< 2.10.11	UNKNOWN
FreeBSD	any	noarch	py39-ansible-base	< 2.10.11	UNKNOWN
FreeBSD	any	noarch	py36-ansible2	< 2.9.23	UNKNOWN
FreeBSD	any	noarch	py37-ansible2	< 2.9.23	UNKNOWN