Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Ubuntu 18.04 LTS USN-6846-2 moderate: ansible regression

ubuntu
Calendar Grey December 2, 2024
Dist Ubuntu Esm H88
A recent Ansible patch for Ubuntu fixes a regression linked to prior security issues. Users are advised to upgrade.
USN-6846-1 caused some regression in ansible.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-6846-1 caused some regression in ansible. Software Description: - ansible: Configuration management, deployment, and task execution system Details: USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the inconvenience. Original advisory details:  It was discovered that Ansible incorrectly handled certain inputs when  using tower_callback parameter. If a user or an automated system were  tricked into opening a specially crafted input file, a remote attacker  could possibly use this issue to obtain sensitive information. This issue  only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.  (CVE-2022-3697)  It was discovered that Ansible incorrectly handled certain inputs. If a  user or an automated system we...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS   ansible                         2.5.1+dfsg-1ubuntu0.1+esm3                                   Available with Ubuntu Pro Ubuntu 16.04 LTS   ansible                         2.0.0.2-2ubuntu1.3+esm3                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-6846-2

  https://ubuntu.com/security/notices/USN-6846-1

 

Ubuntu Security Notice USN-6846-2

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here