Red Hat Security Advisory: ansible-core bug fix, enhancement, and security update

Fixed packages 2

Vulnerabilities 1

• Medium 5.0
  CVE-2024-0690

  Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration

  An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may in…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Ansible Automation Platform 2.4 for RHEL 8 Linux Debian Ubuntu Azure Linux PyPI
  Feb 6, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2259013
• article
  https://issues.redhat.com/browse/RHEL-18950
• article
  https://issues.redhat.com/browse/RHEL-19298
• article
  https://issues.redhat.com/browse/RHEL-23783
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2246.json
• report
  https://access.redhat.com/security/cve/CVE-2024-0690
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-0690
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-0690
• article
  https://github.com/ansible/ansible/pull/82565