84 matches found
mysql-baseline
DevSec MySQL Baseline This Compliance Profile ensures, that all hardening projects keep the same quality. https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening https://github.com/dev-sec/puppet-mysql-hardening...
RLSA-2026:91490 Moderate: ansible-collection-redhat-leapp security update
redhat.leapp Ansible collection that handles Rocky Linux upgrades. Security Fixes: ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL data via insecure backup permissions CVE-2026-68563 ansible-collection-redhat-leapp:...
ansible-collection-redhat-leapp security update
An update is available for ansible-collection-redhat-leapp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list redhat.leapp Ansible collection that handles Rocky...
RLSA-2026:91491 Important: ansible-collection-redhat-leapp security update
redhat.leapp Ansible collection that handles Rocky Linux upgrades. Security Fixes: ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL data via insecure backup permissions CVE-2026-68563 ansible-collection-redhat-leapp:...
ansible-collection-redhat-leapp security update
An update is available for ansible-collection-redhat-leapp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list redhat.leapp Ansible collection that handles Rocky...
ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp report tampering
A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and cop...
ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL data via insecure backup permissions
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
Moderate: Red Hat Security Advisory: ansible-collection-redhat-leapp security update
An update for ansible-collection-redhat-leapp is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: ansible-collection-redhat-leapp security update
An update for ansible-collection-redhat-leapp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp report tampering
A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and cop...
ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL data via insecure backup permissions
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
RHEL 10 : rhc-worker-playbook (RHSA-2026:79112)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:79112 advisory. A worker for yggdrasil that receives Ansible playbooks and executes them against the local host. Security Fixes: ansible-collection-ansible-posix:...
Important: Red Hat Security Advisory: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
CLEANSTART-2026-WL91519 flaw was found in Ansible Collection community
Security vulnerability affects the ansible package. A flaw was found in Ansible Collection community...
Security Bulletin: Storage Virtualize Ansible Collection is VEX affected by a vulnerability in the crypography package
Summary Storage Virtualize Ansible Collection uses the cryptography package to establish secure communications with managed systems. Due to CVE-2026-34073, certificate validation performed by the cryptography package may incorrectly trust certificates in certain DNS name constraint scenarios...
CVE-2026-87872 Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure
A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...
CVE-2026-87872
A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...
CVE-2026-87874
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
CVE-2026-87874
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
CVE-2026-87874: Deserialization of Untrusted Data
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...