Ansible Role: CVE-2016-3714

Fix ImageMagick Command Injection (CVE-2016-3714) security issue with Ansible.

Requirements

Any installed imagemagick and before v6.7.7.10 machine.

Role Variables

A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml.

policy_path: "/etc/ImageMagick/policy.xml"
injection_src: "/etc/passwd"
injection_dest: "/tmp/hack.txt"

Dependencies

none.

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: servers
  roles:
     - { role: chusiang.CVE-2016-3714 }

License

Copyright (c) chusiang from 2016 under the MIT license.