You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible/test
Sloane Hertel d41e38435b
[2.9] CVE-2020-1746 - Remove the params module option from ldap_attr and ldap_entry (#68714)
* Remove the params module option from ldap_attr and ldap_entry

Module options that circumvent Ansible's option handling were disallowed
in:
https://meetbot.fedoraproject.org/ansible-meeting/2017-09-28/ansible_dev_meeting.2017-09-28-15.00.log.html

Additionally, this particular usage can be insecure if bind_pw is set
this way as the password could end up in a logfile or displayed on
stdout.

Fixes CVE-2020-1746

(cherry picked from commit 0ff609f1bc)

* Fix formatting for option names

Co-Authored-By: Felix Fontein <felix@fontein.de>

* Fix fail_json

* fix indentation error

Co-authored-by: Toshio Kuratomi <a.badger@gmail.com>
Co-authored-by: Felix Fontein <felix@fontein.de>
5 years ago
..
ansible_test Relocate ansible-test self tests outside package. (#61255) 5 years ago
integration prevent ansible_facts injection (#68431) 5 years ago
legacy Rename Azure modules: facts -> info (#61505) 5 years ago
lib/ansible_test [stable-2.9] Add CentOS 8 to the test matrix (#68025) 5 years ago
sanity [2.9] CVE-2020-1746 - Remove the params module option from ldap_attr and ldap_entry (#68714) 5 years ago
units ansible-galaxy - Fix tar path traversal issue during install - CVE-2020-10691 - 2.9 (#68601) 5 years ago
utils Increase unit test timeouts. 5 years ago