Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure that unsafe is more difficult to lose [stable-2.14] #82295

Merged
merged 2 commits into from Nov 27, 2023

Conversation

sivel
Copy link
Member

@sivel sivel commented Nov 27, 2023

SUMMARY

Ensure that unsafe is more difficult to lose

CVE-2023-5764

ISSUE TYPE
  • Bugfix Pull Request
ADDITIONAL INFORMATION

@ansibot ansibot added bug This issue/PR relates to a bug. needs_triage Needs a first human triage before being processed. backport This PR does not target the devel branch. labels Nov 27, 2023
@ansibot ansibot added the needs_revision This PR fails CI tests or a maintainer has requested a review/revision of the PR. label Nov 27, 2023
* Add Task.untemplated_args, and switch assert over to use it
* Don't use re in first_found, switch to using native string methods
* If nested templating results in unsafe, just error, don't continue

(cherry picked from commit 586f192)
@ansibot ansibot removed the needs_revision This PR fails CI tests or a maintainer has requested a review/revision of the PR. label Nov 27, 2023
@nitzmahone nitzmahone merged commit 7239d2d into ansible:stable-2.14 Nov 27, 2023
83 checks passed
@sivel sivel removed the needs_triage Needs a first human triage before being processed. label Nov 27, 2023
@ansible ansible locked and limited conversation to collaborators Dec 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
backport This PR does not target the devel branch. bug This issue/PR relates to a bug.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants