Advisory ROSA-SA-2025-2553

Software: rsync 3.1.2 OS: rosa-server79 packageevrstring: rsync-3.1.2-12.0.1.res7 CVE-ID: CVE-2017-16548 BDU-ID: 2021-01395 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the receivexattr function in xattrs.c of the Rsync file transfer and synchronization utility is related to the lack of a check f...

Security Bulletin: IBM Fusion HCI Installer is vulnerable to arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service due to various Python packages

Summary The IBM Fusion Installer is affected by vulnerabilities in Ansible and Python packages dnspython, requests, certifi and idna. Vulnerabilities include arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service. CVE-2023-5764,...

USN-6846-2 ansible regression

USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansible incorrectly handled certain inputs when using towercallback parameter. If a user...

CVE-2024-5764

creationtimestamp| type| source ---|---|--- 2024-10-23 18:13:29+00:00| seen| https://t.me/cvedetector/8696 2024-11-14 20:10:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9036 2025-01-12 17:06:34+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lfkpgsva2m2h...

CVE-2024-5764 Nexus Repository 3 - Static hard-coded encryption passphrase used by default

Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database SMTP or HTTP proxy credentials, user tokens, tokens, among others. The affected versions relied on ...

Fedora: Security Advisory (FEDORA-2023-2aa09dd8d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5764-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: ansible (CVE-2023-5764)

The version of ansible installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5764 advisory. - A template injection flaw was found in Ansible where a user's controller internal templating operations May...

USN-6846-1: Ansible vulnerabilities

It was discovered that Ansible incorrectly handled certain inputs when using towercallback parameter. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. This issue only affecte...

CVE-2023-5764 affecting package ansible for versions less than 2.17.0-1

CVE-2023-5764 affecting package ansible for versions less than 2.17.0-1. An upgraded version of the package is available that resolves this issue...

CLSA-2024-1716287930 ansible: Fix of CVE-2023-5764

CVE-2023-5764: avoid evaluate unsafe conditions...

CLSA-2024-1716272658 ansible: Fix of CVE-2023-5764

CVE-2023-5764: avoid evaluate unsafe conditions...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2023:7773)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7773 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

SUSE-SU-2024:1427-1 Security Beta update for SUSE Manager Client Tools and Salt

This update fixes the following issues: POSImage-Graphical7: - Update to version 0.1.1710765237.46af599 Move image services to dracut-saltboot package Use salt bundle - Update to version 0.1.1645440615.7f1328c Remove deprecated kiwi functions POSImage-JeOS7: - Update to version...

CVE-2023-5764 affecting package ansible for versions less than 2.14.12-2

CVE-2023-5764 affecting package ansible for versions less than 2.14.12-2. An upgraded version of the package is available that resolves this issue...

Medium: ansible-core

Issue Overview: The upstream bug report describes this issue as follows: A flaw was found in Ansible, where a user's controller is vulnerable to template injection when internal templating operations may errantly remove the unsafe designation from template data. CVE-2023-5764 Affected Packages:...

Medium: ansible-core

Issue Overview: The upstream bug report describes this issue as follows: A flaw was found in Ansible, where a user's controller is vulnerable to template injection when internal templating operations may errantly remove the unsafe designation from template data. CVE-2023-5764 Affected Packages:...

Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2024-465)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-465 advisory. The upstream bug report describes this issue as follows:A flaw was found in Ansible, where a user's controller is vulnerable to template injection when internal templating operations may errantly remove...

Fedora 39 : ansible / ansible-core (2023-3a0ce521ab)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-3a0ce521ab advisory. Latest round of ansible/ansible-core minor releases. Mitigates CVE-2023-5764...

Fedora: Security Advisory (FEDORA-2023-3a0ce521ab)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...