ALT-PU-2020-2923: package ansible update to version 2.9.13-alt1
Описание
This update upgrades ansible to version 2.9.13-alt1.
Устраненные уязвимости9
Ссылки6
GHSA-785x-qw4v-6872
https://github.com/advisories/GHSA-785x-qw4v-6872GHSA-j667-c2hm-f2wp
https://github.com/advisories/GHSA-j667-c2hm-f2wpGHSA-m429-fhmv-c6q2
https://github.com/advisories/GHSA-m429-fhmv-c6q2GHSA-pm48-cvv2-29q5
https://github.com/advisories/GHSA-pm48-cvv2-29q5GHSA-x7jh-595q-wq82
https://github.com/advisories/GHSA-x7jh-595q-wq82Связанные уязвимости
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.