ALT-PU-2020-1453: package ansible update to version 2.8.10-alt1
Описание
This update upgrades ansible to version 2.8.10-alt1.
Устраненные уязвимости19
Ссылки11
GHSA-3m93-m4q6-mc6v
https://github.com/advisories/GHSA-3m93-m4q6-mc6vGHSA-6fq2-x65v-v9h7
https://github.com/advisories/GHSA-6fq2-x65v-v9h7GHSA-893h-35v4-mxqx
https://github.com/advisories/GHSA-893h-35v4-mxqxGHSA-923p-fr2c-g5m2
https://github.com/advisories/GHSA-923p-fr2c-g5m2GHSA-f85h-23mf-2fwh
https://github.com/advisories/GHSA-f85h-23mf-2fwhGHSA-frxj-5j27-f8rf
https://github.com/advisories/GHSA-frxj-5j27-f8rfGHSA-g4mq-6fp5-qwcf
https://github.com/advisories/GHSA-g4mq-6fp5-qwcfGHSA-gwr8-5j83-483c
https://github.com/advisories/GHSA-gwr8-5j83-483cGHSA-p62g-jhg6-v3rq
https://github.com/advisories/GHSA-p62g-jhg6-v3rqGHSA-pm48-cvv2-29q5
https://github.com/advisories/GHSA-pm48-cvv2-29q5Связанные уязвимости
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.