tocsin

Debian/ansible: high 7.4

Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.

Action: Upgrade ansible to 1.3.4+dfsg-1 or later.

Affected

introducedfixedlast affected
01.3.4+dfsg-1-

Fixed versions

1.3.4+dfsg-1

Sources

published · modified · JSON