Summary
This update fixes the following issues:
ansible:
- Security issues fixed:
* CVE-2024-8775: Fixed issue where sensitive information stored in Ansible Vault files
could be exposed in plaintext (bsc#1230601)
spacewalk-client-tools:
- Version 4.3.22-0
* Allow translation to wrap strings as weblate forces it
* Show Source String change for translations
uyuni-proxy-systemd-services:
- Version 4.3.15-0
* Update to Multi-Linux Manager 4.3.15
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| openSUSE · Leap 15.6 | ansible | 2.9.27-150000.1.20.1 |
| SUSE · Manager Client Tools 15 | ansible | 2.9.27-150000.1.20.1 |
| SUSE · Manager Client Tools 15 | spacewalk-client-tools | 4.3.22-150000.3.100.1 |
| SUSE · Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.15-150000.1.30.1 |
| SUSE · Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.15-150000.1.30.1 |
| SUSE · Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.20.1 |
| SUSE · Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.15-150000.1.30.1 |
Vulnerabilities 1
-
Medium 5.5
Ansible-core: exposure of sensitive information in ansible vault files due to improper logging
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true…