Debian dla-3695 : ansible - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3695 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3695-2 [email protected] https://www.debian.org/lts/security/...

Advisory ROSA-SA-2024-2532

Software: ansible 2.9.18 OS: rosa-server79 packageevrstring: ansible-2.9.18-1.res7 CVE-ID: CVE-2021-20228 BDU-ID: 2021-03706 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Ansible configuration management system is related to information disclosure. Exploitation of the vulnerability could all...

CVE-2021-20191

creationtimestamp| type| source ---|---|--- 2023-11-10 14:07:10+00:00| seen| https://t.me/arpsyndicate/41 2023-11-10 20:13:30+00:00| seen| https://t.me/arpsyndicate/47...

Amazon Linux 2 : ansible (ALASANSIBLE2-2023-004)

The version of ansible installed on the remote host is prior to 2.9.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ANSIBLE2-2023-004 advisory. A flaw was found in ansible. The 'authkey' and 'privkey' credentials are disclosed by default and not protected by...

SUSE SLES15: ansible / ansible-doc / ansible-test / dracut-saltboot / etc (SUSE-SU-2022:3178-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3178-1 advisory. ansible: - Update to version 2.9.27 jscSLE-23631, jscSLE-24133 CVE-2021-3620 ansible-connection module discloses...

SUSE: Security Advisory (SUSE-SU-2022:3178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Important (SUSE-SU-2022:3178-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2022:0081-1 Security update for ansible

Ansible was updated to 2.9.21 to fix lots of bugs and security issues. Update to version 2.9.20, maintenance release containing numerous bugfixes. Update to version 2.9.19 with minor changes and a few bug fixes. Update to version 2.9.18: CVE-2021-20228 where default and fallback values for nolog...

Security update for ansible (important)

openSUSE Security Update: Security update for ansible Announcement ID: openSUSE-SU-2022:0081-1 Rating: important References: 1099808 1112959 1118896 1126503 1137528 1157968 1157969 1164133 1164134 1164135 1164136 1164137 1164138 1164139 1164140 1165393 1166389 1167440 1167532 1167873 1171162...

Mageia: Security Advisory (MGASA-2021-0132)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0131)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-20191 affecting package ansible 2.9.12-1

CVE-2021-20191 affecting package ansible 2.9.12-1. An upgraded version of the package is available that resolves this issue...

SUSE-SU-2021:2121-1 Security update for ansible

This update for ansible fixes the following issues: - Update to 2.9.22: - CVE-2021-3447: multiple modules expose secured values bsc1183684 - CVE-2021-20228: basic.py nolog with fallback option bsc1181935 - CVE-2021-20191: multiple collections exposes secured values bsc1181119 - CVE-2021-20180:...

ansible-vault-rekey (1.0.0), ansiblerunnerapi (0.0.2) +31 more potentially affected by CVE-2021-20191 via ansible (>=2.0.0.0, <=2.8.18)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =4.3.0a0, =0.0.1, =1.3.0rc1, =0.4.0, =0.0.11, =2.0.0, =0.1.2.dev20190704124001, =0.1.4, =0.1.7 and more Source cves: CVE-2021-20191 Source advisory: GHSA-8F4M-HCCC-8QPH...

ansible-roster (0.4.1), ants-client (>=2.0.0b4, <=2.1.0) +7 more potentially affected by CVE-2021-20191 via ansible (>=2.9.0b1, <=2.9.14)

ansible PYPI version =2.9.0b1, =2.0.0b4, =0.1.2, =0.0.6, =0.0.1.dev390, =0.0.1.dev0, =0.0.18, =0.0.21 Source cves: CVE-2021-20191 Source advisory: GHSA-8F4M-HCCC-8QPH...

ansible-inventory-to-ssh-config (>=0.0.2, <=1.0.0), ansible-role-chrony (>=1.0.3, <=1.3.0) +5 more potentially affected by CVE-2021-20191 via ansible (>=2.10.0rc1, <=2.10.5)

ansible PYPI version =2.10.0rc1, =0.0.2, =1.0.3, =3.0.0, =2.2.0, =0.0.1, =0.0.29, =0.0.31 Source cves: CVE-2021-20191 Source advisory: GHSA-8F4M-HCCC-8QPH...

RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.6] (Moderate) (RHSA-2021:2180)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2180 advisory. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to...

ansible-vault-rekey (1.0.0), ansiblerunnerapi (0.0.2) +31 more potentially affected by CVE-2021-20191 via ansible (>=2.0.0.0, <=2.8.18)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =4.3.0a0, =0.0.1, =1.3.0rc1, =0.4.0, =0.0.11, =2.0.0, =0.1.2.dev20190704124001, =0.1.4, =0.1.7 and more Source cves: CVE-2021-20191 Source advisory: OSV:PYSEC-2021-124...

ansible-roster (0.4.1), ants-client (>=2.0.0b4, <=2.1.0) +6 more potentially affected by CVE-2021-20191 via ansible (>=2.9.0, <=2.9.14)

ansible PYPI version =2.9.0, =2.0.0b4, =0.0.6, =0.0.1.dev390, =0.0.1.dev0, =0.0.18, =0.0.21 Source cves: CVE-2021-20191 Source advisory: OSV:PYSEC-2021-124...

ansible-inventory-to-ssh-config (>=0.0.2, <=1.0.0), ants-client (>=3.0.0, <=3.0.5) +1 more potentially affected by CVE-2021-20191 via ansible (>=2.10.0, <=2.10.5)

ansible PYPI version =2.10.0, =0.0.2, =3.0.0, =0.0.29, =0.0.31 Source cves: CVE-2021-20191 Source advisory: OSV:PYSEC-2021-124...