Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.6]

Fixed packages 2

Vulnerabilities 4

• High 7.5
  CVE-2021-20228

  Ansible Exposes Sensitive Information

  A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The…

  ansible ansible ansible ansible Debian Ubuntu Azure Linux PyPI
  Apr 29, 2021
• Medium 5.5
  CVE-2021-20178

  Insertion of Sensitive Information into Log File in ansible

  A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials.…

  ansible ansible ansible Debian Ubuntu PyPI
  May 26, 2021
• Medium 5.5
  CVE-2021-20180

  Insertion of Sensitive Information into Log File in ansible

  A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials.…

  ansible ansible ansible Debian Ubuntu PyPI
  Mar 16, 2022
• Medium 5.5
  CVE-2021-20191

  Insertion of Sensitive Information into Log File in ansible

  A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest t…

  ansible ansible ansible ansible Debian Ubuntu Alpine PyPI
  May 26, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1914774
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1915808
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1916813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1924590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1925002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1933238
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1933672
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2180.json
• report
  https://access.redhat.com/security/cve/CVE-2021-20178
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20178
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20178
• report
  https://access.redhat.com/security/cve/CVE-2021-20180
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20180
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20180
• report
  https://access.redhat.com/security/cve/CVE-2021-20191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20191
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20191
• report
  https://access.redhat.com/security/cve/CVE-2021-20228
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20228
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20228
• article
  https://github.com/ansible/ansible/pull/73487