Summary
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically.
Security Fix(es):
* ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration (CVE-2024-0690)
Bug Fix(es):
* Update ansible-core to 2.16.3 (JIRA:Rocky Linux-23782)
* Rebuild ansible-core with python 3.12 (JIRA:Rocky Linux-24141)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | ansible-core | 0:2.16.3-2.el8 |
Vulnerabilities 1
-
Medium 5.0
Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may in…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2259013