Linux Distros Unpatched Vulnerability : CVE-2019-10156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosu...

RHEL 7 : ansible (RHSA-2019:3789)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3789 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...

RHEL 7 : ansible (RHSA-2019:3744)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3744 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...

Debian: Security Advisory (DLA-2535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2535-1 : ansible security update

CVE-2017-7481 Ansible fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now...

Fedora: Security Advisory for ansible (FEDORA-2020-87f5e1e829)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: Red Hat Security Advisory: ansible security update

An update for ansible is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: ansible security update

An update for ansible is now available for Red Hat OpenStack Platform 14.0 Rocky. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

[SECURITY] [DLA 1923-1] ansible security update

Package : ansible Version : 1.7.2+dfsg-2+deb8u2 CVE ID : CVE-2015-3908 CVE-2015-6240 CVE-2018-10875 CVE-2019-10156 Debian Bug : 930065 Several vulnerabilities were discovered in Ansible, a configuration management, deployment, and task execution system. CVE-2015-3908 A potential man-in-the-middle...

mixbytes-tank (>=0.1.2.dev20190704124001, <=0.2.1), pyarchops (0.0.5) +1 more potentially affected by CVE-2019-10156 via ansible (2.8.0)

ansible PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - mixbytes-tank =0.1.2.dev20190704124001, =0.0.4, =0.1.0 Source cves: CVE-2019-10156 Source advisory: OSV:GHSA-GRGM-PPH5-J5H7...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +5 more potentially affected by CVE-2019-10156 via ansible (>=2.7.2, <=2.7.9)

ansible PYPI version =2.7.2, =6.0.0, =1.0.9, =3.0.0a1, =0.0.31, =0.1.1.6 - solida 0.9.7 Source cves: CVE-2019-10156 Source advisory: OSV:GHSA-GRGM-PPH5-J5H7...

pyansible (>=1.0.0, <=1.0.3) potentially affected by CVE-2019-10156 via ansible (1.9.4)

ansible PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - pyansible =1.0.0, =1.0.3 Source cves: CVE-2019-10156 Source advisory: OSV:GHSA-GRGM-PPH5-J5H7...

ansible-vault-rekey (1.0.0), ansitom (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2019-10156 via ansible (>=2.0.0.0, <=2.5.15)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =4.3.0a0, =0.0.1, =1.3.0rc1, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =0.0.22a2 - snaps 6.1.0.dev392 and more Source cves: CVE-2019-10156 Source advisory: GHSA-GRGM-PPH5-J5H7...

ansible-vault-rekey (1.0.0), ansitom (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2019-10156 via ansible (>=2.0.0.0, <=2.5.15)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =4.3.0a0, =0.0.1, =1.3.0rc1, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =0.0.22a2 - snaps 6.1.0.dev392 and more Source cves: CVE-2019-10156 Source advisory: OSV:GHSA-GRGM-PPH5-J5H7...

mixbytes-tank (>=0.1.2.dev20190704124001, <=0.2.1), pyarchops (0.0.5) +1 more potentially affected by CVE-2019-10156 via ansible (2.8.0)

ansible PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - mixbytes-tank =0.1.2.dev20190704124001, =0.0.4, =0.1.0 Source cves: CVE-2019-10156 Source advisory: GHSA-GRGM-PPH5-J5H7...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +5 more potentially affected by CVE-2019-10156 via ansible (>=2.7.2, <=2.7.9)

ansible PYPI version =2.7.2, =6.0.0, =1.0.9, =3.0.0a1, =0.0.31, =0.1.1.6 - solida 0.9.7 Source cves: CVE-2019-10156 Source advisory: GHSA-GRGM-PPH5-J5H7...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +5 more potentially affected by CVE-2019-10156 via ansible (>=2.7.2, <=2.7.9)

ansible PYPI version =2.7.2, =6.0.0, =1.0.9, =3.0.0a1, =0.0.31, =0.1.1.6 - solida 0.9.7 Source cves: CVE-2019-10156 Source advisory: OSV:PYSEC-2019-2...

ansible-vault-rekey (1.0.0), ansitom (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2019-10156 via ansible (>=2.0.0.0, <=2.5.15)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =4.3.0a0, =0.0.1, =1.3.0rc1, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =0.0.22a2 - snaps 6.1.0.dev392 and more Source cves: CVE-2019-10156 Source advisory: OSV:PYSEC-2019-2...

ansible-flow (0.1.0), ansible-vault-rekey (1.0.0) +19 more potentially affected by CVE-2019-10156 via ansible (>=1.9.4, <=2.5.15)

ansible PYPI version =1.9.4, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =4.3.0a0, =0.0.1, =1.3.0rc1, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =0.0.22a2 and more Source cves: CVE-2019-10156 Source advisory: MEND:CVE-2019-10156...

mixbytes-tank (>=0.1.2.dev20190704124001, <=0.2.1), pyarchops (0.0.5) +1 more potentially affected by CVE-2019-10156 via ansible (2.8.0)

ansible PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - mixbytes-tank =0.1.2.dev20190704124001, =0.0.4, =0.1.0 Source cves: CVE-2019-10156 Source advisory: MEND:CVE-2019-10156...