Stay Secure with the Latest Linux Advisories

security advisorymoderateexposure

Mageia 8 MGASA-2021-0132 Moderate: Ansible Data Leak Risks

User data leak in snmp_facts module (CVE-2021-20178). The bitbucket_pipeline_variable module exposed secured values (CVE-2021-20180). . MGASA-2021-0132 - Updated ansible packages fix security vulnerability Publication date: 12 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0132.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-20178, CVE-2021-20180, CVE-2021-20191, CVE-2021-20228 User data leak in snmp_facts module (CVE-2021-20178). The bitbucket_pipeline_variable module exposed secured values (CVE-2021-20180). Multiple collections exposed secured values (CVE-2021-20191). In basic.py, no_log with fallback option (CVE-2021-20228). The ansible package has been updated to version 2.9.18, fixing these issues and other bugs. References: - https://bugs.mageia.org/show_bug.cgi?id=28436 - https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#id64 - https://access.redhat.com/errata/RHSA-2021:0664 - https://www.cve.org/CVERecord?id=CVE-2021-20178 - https://www.cve.org/CVERecord?id=CVE-2021-20180 - https://www.cve.org/CVERecord?id=CVE-2021-20191 - https://www.cve.org/CVERecord?id=CVE-2021-20228 SRPMS: - 8/core/ansible-2.9.18-1.mga8 . Enhanced Ansible updates address severe vulnerabilities in Mageia advisory MGASA-2021-0132, bolstering user information security.. Ansible Update,Mageia Security,Module Exposure,Data Leak,Vulnerability Fix. . LinuxSecurity.com Team

Mar 11, 2021 Mageia