RHEL 7 / 8 : Ansible (RHSA-2019:3207)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3207 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

SUSE CVE-2019-14856

ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...

RHEL 7 : ansible (RHSA-2020:0756)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0756 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...

mixbytes-tank (>=0.1.2.dev20190704124001, <=0.2.1), pyarchops (0.0.5) +2 more potentially affected by CVE-2019-14856 via ansible (>=2.8.0, <=2.8.4)

ansible PYPI version =2.8.0, =0.1.2.dev20190704124001, =0.0.4, =0.1.0 - walletlib 0.1.0 Source cves: CVE-2019-14856 Source advisory: OSV:GHSA-6FQ2-X65V-V9H7...

mixbytes-tank (>=0.1.2.dev20190704124001, <=0.2.1), pyarchops (0.0.5) +2 more potentially affected by CVE-2019-14856 via ansible (>=2.8.0, <=2.8.4)

ansible PYPI version =2.8.0, =0.1.2.dev20190704124001, =0.0.4, =0.1.0 - walletlib 0.1.0 Source cves: CVE-2019-14856 Source advisory: GHSA-6FQ2-X65V-V9H7...

ome-ansible-molecule (0.4.4) potentially affected by CVE-2019-14856 via ansible (2.6.18)

ansible PYPI version 2.6.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ome-ansible-molecule 0.4.4 Source cves: CVE-2019-14856 Source advisory: GHSA-6FQ2-X65V-V9H7...

CVE-2019-14856

The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...

Photon OS 3.0: Ansible PHSA-2020-3.0-0078

An update of the ansible package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0078. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135779;...

Security update for ansible (moderate)

openSUSE Security Update: Security update for ansible Announcement ID: openSUSE-SU-2020:0523-1 Rating: moderate References: 1137479 1142542 1142690 1144453 1153452 1154231 1154232 1154830 1157968 1157969 Cross-References: CVE-2019-10206 CVE-2019-10217 CVE-2019-14846 CVE-2019-14856 CVE-2019-14858...

openSUSE Security Update : ansible (openSUSE-2020-513)

This update for ansible to version 2.9.6 fixes the following issues : Security issues fixed : - CVE-2019-14904: Fixed a vulnerability in solariszone module via crafted solaris zone boo1157968. - CVE-2019-14905: Fixed an issue where malicious code could craft filename in nxosfilecopy module...

openSUSE: Security Advisory for ansible (openSUSE-SU-2020:0513-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0513-1 Security update for ansible

This update for ansible to version 2.9.6 fixes the following issues: Security issues fixed: - CVE-2019-14904: Fixed a vulnerability in solariszone module via crafted solaris zone boo1157968. - CVE-2019-14905: Fixed an issue where malicious code could craft filename in nxosfilecopy module...

Security update for ansible (moderate)

openSUSE Security Update: Security update for ansible Announcement ID: openSUSE-SU-2020:0513-1 Rating: moderate References: 1137479 1142542 1142690 1144453 1153452 1154231 1154232 1154830 1157968 1157969 Cross-References: CVE-2019-10206 CVE-2019-10217 CVE-2019-14846 CVE-2019-14856 CVE-2019-14858...

Photon OS 2.0: Ansible PHSA-2020-2.0-0226

An update of the ansible package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0226. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ALPINE-CVE-2019-14856

ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...

CVE-2019-14856

ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...

mixbytes-tank (>=0.1.2.dev20190704124001, <=0.2.1), pyarchops (0.0.5) +2 more potentially affected by CVE-2019-14856 via ansible (>=2.8.0, <=2.8.4)

ansible PYPI version =2.8.0, =0.1.2.dev20190704124001, =0.0.4, =0.1.0 - walletlib 0.1.0 Source cves: CVE-2019-14856 Source advisory: OSV:PYSEC-2019-146...

CVE-2019-14856

ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +7 more potentially affected by CVE-2019-14856 via ansible (>=2.7.2, <=2.7.13)

ansible PYPI version =2.7.2, =6.0.0, =1.0.9, =3.0.0a1, =1.12.1, =0.0.31, =0.0.1.dev144, =0.0.1.dev220 Source cves: CVE-2019-14856 Source advisory: OSV:PYSEC-2019-146...

CVE-2019-14856

CVE-2019-14856 affects Ansible; connected updates show that openSUSE/SUSE patches (ansible 2.9.6 in openSUSE-2020-513 and 2.9.6 in SUSE-2020-0523) fix this and related CVEs by addressing an incomplete fix for CVE-2019-10206 and other issues (e.g., passwords in prompts/log leakage). The issue orig...