Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3043
HistoryMay 23, 2024 - 12:00 a.m.

ansible-core bug fix, enhancement, and security update

2024-05-2300:00:00
linux.oracle.com
3
ansible-core
bug fix
enhancement
security update
python 3.12
cve-2024-0690
information leak
ansible_no_log
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.9%

[2.16.3-2]

  • rebuild with python 3.12 (RHEL-24141)
    [2.16.3-1]
  • ansible-core 2.16.3 release (RHEL-23782)
  • Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)
    [2.16.2-1]
  • ansible-core 2.16.2 release (RHEL-19297)
    [2.16.1-1]
  • ansible-core 2.16.1 release (RHEL-18965)

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.9%