ansible-core-2.20-2.20.6-1.1 on GA media (moderate)

ansible-core-2.20-2.20.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:10945-1 Rating: moderate Cross-References: CVE-2023-5115 CVE-2023-5764 CVE-2024-0690 CVE-2024-11079 CVE-2024-8775 CVE-2024-9902 CVSS scores: CVE-2023-5115 SUSE : 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N CVE-2023-57...

MiracleLinux 9 : ansible-core-2.14.14-1.el9.ML.1 (AXSA:2024-8083:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8083:01 advisory. ansible-core: possible information leak in tasks that ignore ANSIBLENOLOG configuration CVE-2024-0690 Bug Fixes: Update ansible-core to 2.14.14 JIRA:RHEL-237...

TencentOS Server 4: ansible (TSSA-2024:0976)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0976 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: ansible-core bug fix, enhancement, and (TSSA-2024:0192)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0192 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Security Bulletin: IBM Fusion HCI Installer is vulnerable to arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service due to various Python packages

Summary The IBM Fusion Installer is affected by vulnerabilities in Ansible and Python packages dnspython, requests, certifi and idna. Vulnerabilities include arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service. CVE-2023-5764,...

Security Bulletin: IBM Maximo Application Suite uses ansible-operator 7.11.6 which is vulnerable to CVE-2024-0690.

Summary IBM Maximo Application Suite uses ansible-operator 7.11.6 which is vulnerable to CVE-2024-0690. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-0690 DESCRIPTION: Red Hat Ansible could allow a local authenticated attacker...

CBL Mariner 2.0 Security Update: ansible (CVE-2024-0690)

The version of ansible installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0690 advisory. - An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG...

CVE-2024-0690 affecting package ansible for versions less than 2.14.12-2

CVE-2024-0690 affecting package ansible for versions less than 2.14.12-2. A patched version of the package is available...

CVE-2024-0690 affecting package ansible for versions less than 2.17.0-1

CVE-2024-0690 affecting package ansible for versions less than 2.17.0-1. An upgraded version of the package is available that resolves this issue...

Oracle Linux 8 : ansible-core (ELSA-2024-3043)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3043 advisory. - Fix CVE-2024-0690 possible information leak in tasks that ignore ANSIBLENOLOG configuration RHEL-22123 Tenable has extracted the preceding description block...

ansible-core bug fix, enhancement, and security update

2.16.3-2 - rebuild with python 3.12 RHEL-24141 2.16.3-1 - ansible-core 2.16.3 release RHEL-23782 - Fix CVE-2024-0690 possible information leak in tasks that ignore ANSIBLENOLOG configuration RHEL-22123 2.16.2-1 - ansible-core 2.16.2 release RHEL-19297 2.16.1-1 - ansible-core 2.16.1 release...

ALSA-2024:3043 Moderate: ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

CentOS 8 : ansible-core bug fix, enhancement, and (CESA-2024:3043)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:3043 advisory. - An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG configuration in some scenarios. Information is still...

Oracle Linux 9 : ansible-core (ELSA-2024-2246)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2246 advisory. - Fix CVE-2024-0690 possible information leak in tasks that ignore ANSIBLENOLOG configuration RHEL-22124 Tenable has extracted the preceding description block...

Moderate: ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:0733)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0733 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

SUSE-SU-2024:1427-1 Security Beta update for SUSE Manager Client Tools and Salt

This update fixes the following issues: POSImage-Graphical7: - Update to version 0.1.1710765237.46af599 Move image services to dracut-saltboot package Use salt bundle - Update to version 0.1.1645440615.7f1328c Remove deprecated kiwi functions POSImage-JeOS7: - Update to version...

ansible (>=6.0.0 <=6.7.0), ansible-doctor (>=3.1.2 <=3.1.3) +26 more potentially affected by CVE-2024-0690 via ansible-core (>=2.11.0 <=2.14.11)

ansible-core PYPI version =2.11.0, =6.0.0, =3.1.2, =1.1.2, =1.0.2, =6.0.0, =8.0.0, =1.0.0, =1.4.1, =0.0.1, =0.2.0, =0.1.0, =4.9.0.0, =6.7.0.4 and more Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...

amscrot-py (>=1.0.0 <=1.1.0), ansible (>=9.0.0a1 <=9.13.0) +18 more potentially affected by CVE-2024-0690 via ansible-core (>=2.16.0 <=2.16.2)

ansible-core PYPI version =2.16.0, =1.0.0, =9.0.0a1, =0.1.4, =1.5.65, =1.1.2, =1.3.2, =1.8.0, =16.0.0, =23.0.0, =1.0.0, =0.1.3, =0.1.2, =0.1.4 - shellmarks =3.0.0 and more Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...

agsekit (>=0.0.1 <=1.7.1), ansible (>=8.0.0 <=8.7.0) +19 more potentially affected by CVE-2024-0690 via ansible-core (>=2.15.0 <=2.15.6)

ansible-core PYPI version =2.15.0, =0.0.1, =8.0.0, =2.1.0, =1.1.7, =1.5.28, =0.0.6, =0.1.0, =3.7.4, =0.1.0, =15.0.0, =0.2.0, =0.1.0, =0.1.6 and more Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...