Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 102 articles for you...
197
security advisoryDebianupgradeDebian 11 bullseye: DLA-3695-2 critical: ansible win_template issue
ansible 2.10.7+merged+base+2.10.17+dfsg-0+deb11u1 introduced a regression in the win_template module. This caused win_template tasks to fail with an error. For Debian 11 bullseye, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3695-2
May 04, 2025
•Critical
Debian LTS
172
security advisorysoftware updateaccess controlUbuntu 20.04-14.04: USN-7330-1 critical: Ansible security issues
Several security issues were fixed in Ansible.. ========================================================================== Ubuntu Security Notice USN-7330-1 March 05, 2025 ansible vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Ansible. Software Description: - ansible: Configuration management, deployment, and task execution system Details: It was discovered that Ansible did not properly verify certain fields of X.509 certificates. An attacker could possibly use this issue to spoof SSL servers if they were able to intercept network communications. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-3908) Martin Carpenter discovered that certain connection plugins for Ansible did not properly restrict users. An attacker with local access could possibly use this issue to escape a restricted environment via symbolic links misuse. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-6240) Robin Schneider discovered that Ansible's apt_key module did not properly verify key fingerprints. A remote attacker could possibly use this issue to perform key injection, leading to the access of sensitive information. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8614) It was discovered that Ansible would expose passwords in certain instances. An attacker could possibly use specially crafted input related to this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-10206) It was discovered that Ansible incorrectly logged sensitive information. An attacker with local access could possibly use this issue to access sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2019-14846) It wasdiscovered that Ansible's solaris_zone module accepted input without performing input checking. A remote attacker could possibly use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-14904) It was discovered that Ansible did not generate sufficiently random values, which could lead to the exposure of passwords. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-10729) It was discovered that Ansible's svn module could disclose passwords to users within the same node. An attacker could possibly use this issue to access sensitive information. (CVE-2020-1739) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS ansible 2.9.6+dfsg-1ubuntu0.1~esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS ansible 2.5.1+dfsg-1ubuntu0.1+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS ansible 2.0.0.2-2ubuntu1.3+esm5 Available with Ubuntu Pro ansible-fireball 2.0.0.2-2ubuntu1.3+esm5 Available with Ubuntu Pro ansible-node-fireball 2.0.0.2-2ubuntu1.3+esm5 Available with Ubuntu Pro Ubuntu 14.04 LTS ansible 1.5.4+dfsg-1ubuntu0.1~esm3 Available with Ubuntu Pro ansible-fireball 1.5.4+dfsg-1ubuntu0.1~esm3 Available with Ubuntu Pro ansible-node-fireball 1.5.4+dfsg-1ubuntu0.1~esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7330-1 CVE-2015-3908, CVE-2015-6240, CVE-2016-8614, CVE-2019-10206, CVE-2019-14846, CVE-2019-14904, CVE-2020-10729, CVE-2020-1739 . A critical security alert from Ansible uncovers several threats necessitating prompt upgrades to protect Ubuntu installations.. ansible security, Ubuntu updates, security issues, configuration management, software vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
Mar 06, 2025
•Critical
Ubuntu
172
security advisoryupdateubuntuUbuntu 18.04 LTS: USN-6846-3 moderate: Ansible regression fix
USN-6846-2 caused some regression in ansible.. ========================================================================== Ubuntu Security Notice USN-6846-3 February 13, 2025 ansible regression ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-6846-2 caused some regression in ansible. Software Description: - ansible: Configuration management, deployment, and task execution system Details: USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansible incorrectly handled certain inputs when using tower_callback parameter. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-3697) It was discovered that Ansible incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform a Template Injection. (CVE-2023-5764) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS ansible 2.5.1+dfsg-1ubuntu0.1+esm4 Available with Ubuntu Pro Ubuntu 16.04 LTS ansible 2.0.0.2-2ubuntu1.3+esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6846-3 https://ubuntu.com/security/notices/USN-6846-2 https://ubuntu.com/security/notices/USN-6846-1 https://bugs.launchpad.net/ubuntu/+source/ansible/+bug/2097504 . To fix the Ansible regression from USN-6846-3 on Ubuntu, it's crucial to grasp the security issue that caused the update, focusing on mitigating risks.. AnsibleUpdates, UbuntuSecurity, UpdateInstructions. . LinuxSecurity.com Team
Feb 13, 2025
Ubuntu
202
security advisorymoderatesecurity issueopenSUSE Tumbleweed: 2024:14536-1 moderate: ansible-10 security update
An update that solves 45 vulnerabilities can now be installed.. # ansible-10-10.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14536-1 Rating: moderate Cross-References: * CVE-2014-4966 * CVE-2014-4967 * CVE-2015-3908 * CVE-2016-3096 * CVE-2016-9587 * CVE-2017-7466 * CVE-2017-7481 * CVE-2017-7550 * CVE-2018-10855 * CVE-2018-10875 * CVE-2018-16837 * CVE-2018-16859 * CVE-2018-16876 * CVE-2019-10156 * CVE-2019-10206 * CVE-2019-10217 * CVE-2019-14846 * CVE-2019-14856 * CVE-2019-14858 * CVE-2019-14864 * CVE-2019-14904 * CVE-2019-14905 * CVE-2019-3828 * CVE-2020-10684 * CVE-2020-10685 * CVE-2020-10691 * CVE-2020-10729 * CVE-2020-14330 * CVE-2020-14332 * CVE-2020-1733 * CVE-2020-1734 * CVE-2020-1735 * CVE-2020-1736 * CVE-2020-1737 * CVE-2020-1738 * CVE-2020-1739 * CVE-2020-1740 * CVE-2020-1744 * CVE-2020-1746 * CVE-2020-1753 * CVE-2021-20178 * CVE-2021-20180 * CVE-2021-20191 * CVE-2021-20228 * CVE-2021-3583 CVSS scores: * CVE-2017-7481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2017-7550 ( SUSE ): 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2018-10855 ( SUSE ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2018-10875 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2018-16837 ( SUSE ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2018-16859 ( SUSE ): 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N * CVE-2018-16876 ( SUSE ): 3.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2019-10156 ( SUSE ): 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2019-10206 ( SUSE ): 6.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2019-14846 ( SUSE ): 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N * CVE-2019-14856 ( SUSE ): 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N * CVE-2019-14858 ( SUSE ): 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N * CVE-2019-14904 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2019-14905 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2019-3828 ( SUSE ): 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N * CVE-2020-10684 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2020-10685 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2020-10691 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L * CVE-2020-10729 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2020-14330 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2020-14332 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2020-1733 ( SUSE ): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L * CVE-2020-1734 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L * CVE-2020-1735 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N * CVE-2020-1736 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N * CVE-2020-1737 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2020-1738 ( SUSE ): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L * CVE-2020-1739 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2020-1740 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2020-1746 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2021-20178 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2021-20180 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2021-20191 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2021-20228 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N * CVE-2021-3583 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Tumbleweed An update that solves 45 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the ansible-10-10.6.0-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ansible-10 10.6.0-1.1 ## References: *https://www.suse.com/security/cve/CVE-2014-4966.html * https://www.suse.com/security/cve/CVE-2014-4967.html * https://www.suse.com/security/cve/CVE-2015-3908.html * https://www.suse.com/security/cve/CVE-2016-3096.html * https://www.suse.com/security/cve/CVE-2016-9587.html * https://www.suse.com/security/cve/CVE-2017-7466.html * https://www.suse.com/security/cve/CVE-2017-7481.html * https://www.suse.com/security/cve/CVE-2017-7550.html * https://www.suse.com/security/cve/CVE-2018-10855.html * https://www.suse.com/security/cve/CVE-2018-10875.html * https://www.suse.com/security/cve/CVE-2018-16837.html * https://www.suse.com/security/cve/CVE-2018-16859.html * https://www.suse.com/security/cve/CVE-2018-16876.html * https://www.suse.com/security/cve/CVE-2019-10156.html * https://www.suse.com/security/cve/CVE-2019-10206.html * https://www.suse.com/security/cve/CVE-2019-10217.html * https://www.suse.com/security/cve/CVE-2019-14846.html * https://www.suse.com/security/cve/CVE-2019-14856.html * https://www.suse.com/security/cve/CVE-2019-14858.html * https://www.suse.com/security/cve/CVE-2019-14864.html * https://www.suse.com/security/cve/CVE-2019-14904.html * https://www.suse.com/security/cve/CVE-2019-14905.html * https://www.suse.com/security/cve/CVE-2019-3828.html * https://www.suse.com/security/cve/CVE-2020-10684.html * https://www.suse.com/security/cve/CVE-2020-10685.html * https://www.suse.com/security/cve/CVE-2020-10691.html * https://www.suse.com/security/cve/CVE-2020-10729.html * https://www.suse.com/security/cve/CVE-2020-14330.html * https://www.suse.com/security/cve/CVE-2020-14332.html * https://www.suse.com/security/cve/CVE-2020-1733.html * https://www.suse.com/security/cve/CVE-2020-1734.html * https://www.suse.com/security/cve/CVE-2020-1735.html * https://www.suse.com/security/cve/CVE-2020-1736.html * https://www.suse.com/security/cve/CVE-2020-1737.html * https://www.suse.com/security/cve/CVE-2020-1738.html *https://www.suse.com/security/cve/CVE-2020-1739.html * https://www.suse.com/security/cve/CVE-2020-1740.html * https://www.suse.com/security/cve/CVE-2020-1744.html * https://www.suse.com/security/cve/CVE-2020-1746.html * https://www.suse.com/security/cve/CVE-2020-1753.html * https://www.suse.com/security/cve/CVE-2021-20178.html * https://www.suse.com/security/cve/CVE-2021-20180.html * https://www.suse.com/security/cve/CVE-2021-20191.html * https://www.suse.com/security/cve/CVE-2021-20228.html * https://www.suse.com/security/cve/CVE-2021-3583.html . Ansible-10-10.6.0-1.2 on Fedora Rawhide obtains critical-level patch dealing with multiple security flaws.. openSUSE Tumbleweed, ansible security, update announcement, moderate security, software vulnerabilities. . LinuxSecurity.com Team
Dec 03, 2024
OpenSUSE
172
security advisoryupdateremote accessUbuntu 18.04 LTS USN-6846-2 moderate: ansible regression
USN-6846-1 caused some regression in ansible.. ========================================================================== Ubuntu Security Notice USN-6846-2 December 02, 2024 ansible regression ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-6846-1 caused some regression in ansible. Software Description: - ansible: Configuration management, deployment, and task execution system Details: USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansible incorrectly handled certain inputs when using tower_callback parameter. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-3697) It was discovered that Ansible incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform a Template Injection. (CVE-2023-5764) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS ansible 2.5.1+dfsg-1ubuntu0.1+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS ansible 2.0.0.2-2ubuntu1.3+esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6846-2 https://ubuntu.com/security/notices/USN-6846-1 . A recent Ansible patch for Ubuntu fixes a regression linked to prior security issues. Users are advised to upgrade.. Ubuntu Ansible Security Update, Ansible Regression Fix, Update Recommendations. . LinuxSecurity.com Team
Dec 02, 2024
Ubuntu
197
security advisorysoftware updatedebianDebian 11: DLA-3963-1 moderate: Ansible sensitive data threat
Ansible is a command-line IT automation software application. It can configure systems, deploy software, and orchestrate advanced workflows to support application deployment, system updates, ... . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3963-1
Nov 24, 2024
•Important
Debian LTS
89
security advisoryFedorapackage updateFedora 39: 2023-3a0ce521ab Moderate: Ansible CVE-2023-5764
Latest round of ansible/ansible-core minor releases. Mitigates CVE-2023-5764. - package-9-1-0/2764. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-3a0ce521ab 2023-12-20 01:23:57.701255 -------------------------------------------------------------------------------- Name : ansible Product : Fedora 39 Version : 9.1.0 Release : 1.fc39 URL : https://www.redhat.com/en/ansible-collaborative?intcmp=7015Y000003t7aWQAQ/ Summary : Curated set of Ansible collections included in addition to ansible-core Description : Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. This package provides a curated set of Ansible collections included in addition to ansible-core. -------------------------------------------------------------------------------- Update Information: Latest round of ansible/ansible-core minor releases. Mitigates CVE-2023-5764. - package-9-1-0/2764 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 6 2023 Maxwell G - 9.1.0-1 - Update to 9.1.0. * Tue Nov 21 2023 Maxwell G - 9.0.1-1 - Update to 9.0.1. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-3a0ce521ab' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 20, 2023
•Important
Fedora
202
security advisorypatchimportantopenSUSE: 2022:0081-1 Important: Ansible 26 Issue Security Update
An update that solves 26 vulnerabilities and has one errata is now available. . openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0081-1 Rating: important References: #1099808 #1112959 #1118896 #1126503 #1137528 #1157968 #1157969 #1164133 #1164134 #1164135 #1164136 #1164137 #1164138 #1164139 #1164140 #1165393 #1166389 #1167440 #1167532 #1167873 #1171162 #1174145 #1174302 #1180816 #1180942 #1181119 #1181935 Cross-References: CVE-2018-10875 CVE-2018-16837 CVE-2019-10156 CVE-2019-14846 CVE-2019-14904 CVE-2019-14905 CVE-2020-10684 CVE-2020-10685 CVE-2020-10691 CVE-2020-10729 CVE-2020-14330 CVE-2020-14332 CVE-2020-1733 CVE-2020-1734 CVE-2020-1735 CVE-2020-1736 CVE-2020-1737 CVE-2020-1738 CVE-2020-1739 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 CVE-2021-20228 CVSS scores: CVE-2018-10875 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-10875 (SUSE): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-16837 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-16837 (SUSE): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-10156 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2019-10156 (SUSE): 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVE-2019-14846 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-14846 (SUSE): 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N CVE-2019-14904 (NVD) : 7.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L CVE-2019-14904 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2019-14905 (NVD) : 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L CVE-2019-14905 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-10684 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2020-10685 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-10685 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-10691 (NVD) : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2020-10691 (SUSE): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2020-10729 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-10729 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-14330 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14330 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-14332 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14332 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-1733 (NVD) : 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1733 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1734 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L CVE-2020-1735 (NVD) : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N CVE-2020-1735 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2020-1736 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-1736 (SUSE): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N CVE-2020-1737 (NVD) : 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-1737 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H CVE-2020-1738 (NVD) : 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L CVE-2020-1738 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1739 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2020-1739 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2020-1740 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-1740 (SUSE): 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-1746 (NVD) : 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-1746 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-1753 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20178 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20178 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20180 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20191 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20191 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20228 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-20228 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves 26 vulnerabilities and has one errata is now available. Description: Ansible was updated to 2.9.21 to fix lots of bugs and security issues. Update to version 2.9.20, maintenance release containing numerous bugfixes. Update to version 2.9.19 with minor changes and a fewbug fixes. Update to version 2.9.18: * CVE-2021-20228 where default and fallback values for no_log parameters to modules were not previously masked. (bsc#1181935) * CVE-2021-20178 where several parameters to the snmp_facts module were logged and displayed despite containing sensitive information. (bsc#1180816) * CVE-2021-20180 where several parameters to the bitbucket_pipeline_variable were logged and displayed despite containing sensitive information. (bsc#1180942) * CVE-2021-20191 which addresses a number of modules whose parameters were logged and displayed despite containing sensitive information. For the full list of affected modules, refer to the changelog linked below. (bsc#1181119) Update to version 2.9.17 with minor changes and a few bug fixes. Update to version 2.9.16 with minor changes and many bug fixes. update to version 2.9.15 with following breaking change: * ansible-galaxy login command has been removed update to version 2.9.14 with many small improvements and bug fixes, most notably: * kubectl - connection plugin now redact kubectl_token and kubectl_password in console log (CVE-2020-1753 bsc#1166389). update to version 2.9.13 with many bug fixes, most notably: * A security issue was addressed in the "dnf" module, which previously did not check GPG signatures of packages. * A bug in the "cron" module was fixed. In some cases prior to this fix, the module would inadvertently remove cron entries. update to version 2.9.12 with many bug fixes, most notably the following security fixes: * security issue - copy - Redact the value of the no_log 'content' parameter in the result's invocation.module_args in check mode. Previously when used with check mode and with '-vvv', the module would not censor the content if a change would be made to the destination path. (CVE-2020-14332 bsc#1174302) * security issue atomic_move - change default permissions when creating temporary files so they are not world readable (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736 bsc#1164134) * Fix warning for default permission change when no mode is specified. Follow up to https://github.com/ansible/ansible/issues/67794. (CVE-2020-1736) * Sanitize no_log values from any response keys that might be returned from the uri module (CVE-2020-14330 bsc#1174145). * reset logging level to INFO due to CVE-2019-14846. update to version 2.9.11 with many bug fixes update to version 2.9.10 with many bug fixes. - Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733 (bsc#1164140) update to version 2.9.9 * fix for a regression introduced in 2.9.8 update to version 2.9.8, maintenance release containing numerous bugfixes update to version 2.9.7 with many bug fixes, especially for these security issues: - bsc#1164140 CVE-2020-1733 - insecure temporary directory when running become_user from become directive - bsc#1164139 CVE-2020-1734 shell enabled by default in a pipe lookup plugin subprocess - bsc#1164137 CVE-2020-1735 - path injection on dest parameter in fetch module - bsc#1164134 CVE-2020-1736 atomic_move primitive sets permissive permissions - bsc#1164138 CVE-2020-1737 - Extract-Zip function in win_unzip module does not check extracted path - bsc#1164136 CVE-2020-1738 module package can be selected by the ansible facts - bsc#1164133 CVE-2020-1739 - svn module leaks password when specified as a parameter - bsc#1164135 CVE-2020-1740 - secrets readable after ansible-vault edit - bsc#1165393 CVE-2020-1746 - information disclosure issue in ldap_attr and ldap_entry modules - bsc#1166389 CVE-2020-1753 - kubectl connection plugin leaks sensitive information - bsc#1167532 CVE-2020-10684 - code injection when using ansible_facts as a subkey - bsc#1167440 CVE-2020-10685 - modules which use files encrypted with vault are not properlycleaned up - bsc#1167873 CVE-2020-10691 - archive traversal vulnerability in ansible-galaxy collection install [2] Fixed before 2.9.6, but not yet listed: - bsc#1171162 CVE-2020-10729 two random password lookups in same task return same value - bsc#1157968 CVE-2019-14904 vulnerability in solaris_zone module via crafted solaris zone - bsc#1157969 CVE-2019-14905 malicious code could craft filename in nxos_file_copy module - bsc#1112959 CVE-2018-16837 Information leak in "user" module patch added - (bsc#1137528) CVE-2019-10156: ansible: templating causing an - bsc#1118896 CVE-2018-16876 Information disclosure in vvv+ mode with no_log on (https://github.com/ansible/ansible/pull/49569) - Includes fix for bsc#1099808 (CVE-2018-10875) ansible.cfg is being read from current working directory allowing possible code execution Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-81=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): ansible-2.9.21-bp153.2.3.1 ansible-doc-2.9.21-bp153.2.3.1 ansible-test-2.9.21-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10875.html https://www.suse.com/security/cve/CVE-2018-16837.html https://www.suse.com/security/cve/CVE-2019-10156.html https://www.suse.com/security/cve/CVE-2019-14846.html https://www.suse.com/security/cve/CVE-2019-14904.html https://www.suse.com/security/cve/CVE-2019-14905.html https://www.suse.com/security/cve/CVE-2020-10684.html https://www.suse.com/security/cve/CVE-2020-10685.html https://www.suse.com/security/cve/CVE-2020-10691.html https://www.suse.com/security/cve/CVE-2020-10729.html https://www.suse.com/security/cve/CVE-2020-14330.html https://www.suse.com/security/cve/CVE-2020-14332.html https://www.suse.com/security/cve/CVE-2020-1733.html https://www.suse.com/security/cve/CVE-2020-1734.html https://www.suse.com/security/cve/CVE-2020-1735.html https://www.suse.com/security/cve/CVE-2020-1736.html https://www.suse.com/security/cve/CVE-2020-1737.html https://www.suse.com/security/cve/CVE-2020-1738.html https://www.suse.com/security/cve/CVE-2020-1739.html https://www.suse.com/security/cve/CVE-2020-1740.html https://www.suse.com/security/cve/CVE-2020-1746.html https://www.suse.com/security/cve/CVE-2020-1753.html https://www.suse.com/security/cve/CVE-2021-20178.html https://www.suse.com/security/cve/CVE-2021-20180.html https://www.suse.com/security/cve/CVE-2021-20191.html https://www.suse.com/security/cve/CVE-2021-20228.html https://bugzilla.suse.com/1099808 https://bugzilla.suse.com/1112959 https://bugzilla.suse.com/1118896 https://bugzilla.suse.com/1126503 https://bugzilla.suse.com/1137528 https://bugzilla.suse.com/1157968 https://bugzilla.suse.com/1157969 https://bugzilla.suse.com/1164133 https://bugzilla.suse.com/1164134 https://bugzilla.suse.com/1164135 https://bugzilla.suse.com/1164136 https://bugzilla.suse.com/1164137 https://bugzilla.suse.com/1164138 https://bugzilla.suse.com/1164139 https://bugzilla.suse.com/1164140 https://bugzilla.suse.com/1165393 https://bugzilla.suse.com/1166389 https://bugzilla.suse.com/1167440 https://bugzilla.suse.com/1167532 https://bugzilla.suse.com/1167873 https://bugzilla.suse.com/1171162 https://bugzilla.suse.com/1174145 https://bugzilla.suse.com/1174302 https://bugzilla.suse.com/1180816 https://bugzilla.suse.com/1180942 https://bugzilla.suse.com/1181119 https://bugzilla.suse.com/1181935 . A significant patch for Ansible resolves 26 vulnerabilities, enhancing system resilience and safeguarding information.. Ansible Update, openSUSE Security, Information Disclosure, Security Fixes. .Severity: Important. LinuxSecurity.com Team
Mar 16, 2022
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!