ansible/changelogs/fragments/user-do-not-pass-ssh_key_passphrase-on-cmdline.yaml at 5cbf1bfa0338c438d7bbd26524b60b86ac2f06d4 - wbrawner/ansible - Forgejo: Beyond coding. We forge.

wbrawner/ansible

Martin Krizek 77928e6c3a 2.5: user: do not pass ssh_key_passphrase on cmdline (#47486 )

* user: do not pass ssh_key_passphrase on cmdline

* user: do not pass ssh_key_passphrase on cmdline

CVE-2018-16837

Co-authored-by: Toshio Kuratomi <a.badger@gmail.com>
(cherry picked from commit a0aa53d1a1)

* Ignore user module use of subprocess.

(cherry picked from commit 8d00afc013)

* Fix python3 problem in user module cve fix

(cherry picked from commit 9088671c4e)

* Fix changelog entry for user module CVE fix

(cherry picked from commit 210a43ebeb)
(cherry picked from commit b618339c32)

* zap ignore entry

2018-10-24 11:04:14 -07:00

2 lines

87 B

YAML

Raw Blame History

	`bugfixes:`
	`- user module - do not pass ssh_key_passphrase on cmdline (CVE-2018-16837)`