Stay Secure with the Latest Linux Advisories

security advisorymoderateRed Hat

RedHat: RHSA-2022-0108-01 Moderate: Ansible-Runner Shell Escaping Issue

An update is now available for ansible-runner for Red Hat Ansible Automation Platform 2.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: ansible-runner security and bug fix update Advisory ID: RHSA-2022:0108-01 Product: Red Hat Ansible Automation Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:0108 Issue date: 2022-01-11 CVE Names: CVE-2021-4041 ==================================================================== 1. Summary: An update is now available for ansible-runner for Red Hat Ansible Automation Platform 2.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Ansible Automation Platform 2.0 for RHEL 8 - noarch 3. Description: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * ansible-runner: Ansible: Improper shell escaping (CVE-2021-4041) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in theReferences section. Additional Changes: This update fixes various bugs and adds enhancements. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2028074 - CVE-2021-4041 Ansible: Improper shell escaping in ansible-runner 6. Package List: Red Hat Ansible Automation Platform 2.0 for RHEL 8: Source: ansible-runner-2.0.3-2.el8ap.src.rpm noarch: ansible-runner-2.0.3-2.el8ap.noarch.rpm python38-ansible-runner-2.0.3-2.el8ap.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-4041 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYeGX6NzjgjWX9erEAQiQQA//aCzYgMkZE7jZWg9XilGWwmPeMMF2AaYc h3ESEpWd2fu3RQJmfhB2XFHv8BP0uWEoXTndbC9I91H48Ezmt0ty353vcXed7SNu a2xY5Kw1cK5QWOTRKmn4woZmw2+Rmi4Az01atvo4oryFgYY3/mohTpth+KDdfD7p Un/ILCVfh6XX3HjQiXp2Fal9fgUl7I2kbhzWzo+iyAhShQDsQR0iCMuH7nZBcq7z 7dY3PMEs6C7cBGhK0PvMhJMvGIdA2dJTBD2bgYp1vdcZjRTrui6WBE1efV1Lm0Sf iFpkn2E1pdX2luGHYiC8gIWDzhlY5845PDzpA4ChCYn2X1iKBHRTYKRb8mvag1zq 6gTUogdD5vxhmEoVzqidnBXbBqZBNubu9oMBP0xdE5JrhqsCRrY1tofZVEVRPnra kS3Zb9vhlSVdfbEr5Ywzot6mm2oL1xXUwSkw+ENRCgVmtADDoFOexKSPp3lSTclD wxL27+NabomdXtyPxxGM3SPpWdxrLlDSR0EWh+ufMaYKu/PR/JNsE+xRWYok+l8W A730d/HxgLne9xhpG3utPvq5SL9lQYDsB7yXPPgYrkkbdvYoXPlFvTu/XxsUKb0k k//jHHMbyMUaHBXZn2t/OGdTgVCmQcz7gj3jHA8VJSewe2zjCeXNvBjjfdQMW8R0 R4El11JtWOU=Xylc -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Canonical releases a significant update for snapdaddressing critical vulnerabilities and stability improvements.. ansible-runner update, Red Hat automation, security fix, ansible security advisory. . LinuxSecurity.com Team

Jan 14, 2022 Red Hat