Updated ansible packages fix security vulnerability

🗓️ 23 Sep 2021 04:49:29Reported by Gentoo FoundationType

Updated ansible packages fix security vulnerability. Flaw in logging credentials, template injection vulnerability. Affect Red Hat Ansible Automation Platform and Ansible Tower

Reporter	Title	Published	Views	Family All 140
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to injection attacks in Ansible (CVE-2021-3583).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Ansible vulnerability affects IBM Elastic Storage System (CVE-2021-3583)	28 Feb 202211:18	–	ibm
FreeBSD	Ansible -- Templating engine bug	10 Jun 202100:00	–	freebsd
ATTACKERKB	CVE-2021-3583	22 Sep 202112:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-001)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-003)	27 Sep 202300:00	–	nessus
Tenable Nessus	FreeBSD : Ansible -- Templating engine bug (4c9159ea-d4c9-11eb-aeee-8c164582fbac)	25 Jun 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.20) (Moderate) (RHSA-2021:1342)	22 Apr 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.20) (Moderate) (RHSA-2021:1343)	22 Apr 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	8	any	ansible	2.9.24-1	ansible-2.9.24-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2021:1342
access	www.access.redhat.com/errata/RHSA-2021:2664
github	www.github.com/ansible/ansible/blob/v2.9.24/changelogs/CHANGELOG-v2.9.rst

23 Sep 2021 04:49Current

2.8Low risk

Vulners AI Score2.8

CVSS 23.6

CVSS 3.17.1

EPSS0.00854