CVE-2013-4260

Advisory

Ansible 1.2.3 includes local security fixes for predictable file locations for ControlPersist and retry file paths on shared machines on operating systems without kernel symlink/hardlink protections. See CVE-2013-4260.
https://bugzilla.redhat.com/show_bug.cgi?id=998227

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* Local security fixes for predictable file locations for ControlPersist and retry file paths on shared machines
on operating systems without kernel symlink/hardlink protections.

Resources

• https://pypi.org/project/ansible
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4260
• https://bugzilla.redhat.com/show_bug.cgi?id=998227
• http://www.ansible.com/security
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86898
• https://groups.google.com/forum/#%21topic/ansible-project/UVDYW0HGcNg