Description
A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchive, win_copy, aws_s3 or copy modules. The temporary directory is created in /tmp leaves the s ts unencrypted. On Operating Systems which /tmp is not a tmpfs but part of the root partition, the directory is only cleared on boot and the decryp emains when the host is switched off. The system will be vulnerable when the system is not running. So decrypted data must be cleared as soon as possible and the data which normally is encrypted ble.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Ansible | ansible-engine versions 2.7.x before 2.7.17, ansible-engine 2.8.x before 2.8.11, ansible-engine 2.9.x before 2.9.7, Ansible Tower <= 3.4.5, Ansible Tower <= 3.5.5, Ansible Tower <= 3.6.3 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ansible | 2.9.7+dfsg-1 | — |
| Debian 13 | ansible | 2.9.7+dfsg-1 | — |
| Debian 12 | ansible | 2.9.7+dfsg-1 | — |
| Debian 10 | ansible | 2.7.7+dfsg-1+deb10u1 | DSA-4950-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | ansible | No fix yet | — |
| Ubuntu Pro 18.04 LTS | ansible | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ansible Engine 2 | ansible | 2.7.17-1.el7ae | RHSA-2020:1544, RHSA-2020:1543, RHSA-2020:1542 |
| Red Hat Ansible Engine 2 | ansible-test | 2.9.7-1.el7ae | RHSA-2020:1542, RHSA-2020:1541 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP3 | ansible | 2.9.21-bp153.2.3.1 | openSUSE-SU-2022:0081-1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.9.14-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1600432272.b3ad722f0-3.44.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1599037158.5c4d07480-4.43.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment +3 | 8.20201007-1.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder | 11.2.3~dev29-3.28.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.37.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev76-3.39.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.19.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Pillow | 4.2.1-3.9.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystoneclient | 3.13.1-3.3.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystonemiddleware | 4.17.1-5.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-kombu | 4.1.0-3.7.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-straight-plugin | 1.5.0-1.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-crowbar-client | 3.9.3-1.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | storm | 1.2.3-3.6.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ansible | 2.9.14-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user +8 | 8.20201007-1.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-cinder | 11.2.3~dev29-3.28.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.37.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev76-3.39.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.19.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-Flask-Cors | 3.0.3-3.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-Pillow | 4.2.1-3.9.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-ardana-packager | 0.0.3-7.7.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-keystoneclient | 3.13.1-3.3.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-keystonemiddleware | 4.17.1-5.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-kombu | 4.1.0-3.7.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-straight-plugin | 1.5.0-1.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | storm | 1.2.3-3.6.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev3-14.32.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 | SUSE-SU-2020:3309-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE HPE Helion OpenStack 8 | ansible | 2.9.14-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user +5 | 8.20201007-1.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.12.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder | 11.2.3~dev29-3.28.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.37.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev76-3.39.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.19.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-Flask-Cors | 3.0.3-3.3.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-Pillow | 4.2.1-3.9.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-ardana-packager | 0.0.3-7.7.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-keystoneclient | 3.13.1-3.3.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-keystonemiddleware | 4.17.1-5.3.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-kombu | 4.1.0-3.7.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.12.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20200922-3.23.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | storm | 1.2.3-3.6.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev3-14.32.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 | SUSE-SU-2020:3309-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ansible-10 | 10.6.0-1.1 | openSUSE-SU-2024:14536-1 |
| openSUSE Tumbleweed | ansible-11 | 11.11.0-1.1 | openSUSE-SU-2025:15605-1 |
| openSUSE Tumbleweed | ansible-12 | 12.2.0-1.1 | openSUSE-SU-2025:15753-1 |
| openSUSE Tumbleweed | ansible-13 | 13.7.0-1.1 | openSUSE-SU-2026:10944-1 |
| openSUSE Tumbleweed | ansible-14 | 14.6.0-1.1 | openSUSE-SU-2026:12447-1 |
| openSUSE Tumbleweed | ansible-9 | 9.8.0-1.1 | openSUSE-SU-2024:14244-1 |
| openSUSE Leap 15.3 | ansible | 2.9.21-bp153.2.3.1 | openSUSE-SU-2022:0081-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ansible | >= 2.7.0a1, < 2.7.17 | 2.7.17 | GHSA-77g3-3j5w-64w4 |
| PyPI | ansible | >= 2.8.0a1, < 2.8.11 | 2.8.11 | GHSA-77g3-3j5w-64w4 |
| PyPI | ansible | >= 2.9.0a1, < 2.9.7 | 2.9.7 | GHSA-77g3-3j5w-64w4 |
| PyPI | ansible | >= 2.7.0, < 2.7.17 · >= 2.8.0, < 2.8.11 · >= 2.9.0, < 2.9.7 | 2.7.17, 2.8.11, 2.9.7 | PYSEC-2020-1 |
Advisories 14
- openSUSE-SU-2026:12447-1 ansible-14-14.6.0-1.1 on GA media SUSE / openSUSE Security Updates · Nov 7, 2026
- RHSA-2020:1543 Red Hat Security Advisory: Ansible security and bug fix update (2.8.11) Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:1544 Red Hat Security Advisory: Ansible security and bug fix update (2.7.17) Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:1541 Red Hat Security Advisory: Ansible security and bug fix update (2.9.7) Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:1542 Red Hat Security Advisory: Ansible security and bug fix update (2.9.7) Red Hat Security Advisories (RHSA) · Jun 29, 2026
- WID-SEC-2023-2473 Ansible: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jun 7, 2026
- openSUSE-SU-2026:10944-1 ansible-13-13.7.0-1.1 on GA media SUSE / openSUSE Security Updates · Jun 4, 2026
- openSUSE-SU-2025:15605-1 ansible-11-11.11.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-4950-1 ansible - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2025:15753-1 ansible-12-12.2.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3309-1 Security update for ansible, ardana-ansible, ardana-cinder, ardana-glance, ardana-mq, ardana-nova, ardana-osconfig, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-monasca-installer, openstack-neutron, openstack-nova, python-Django, python-Flask-Cors, python-Pillow, python-ardana-packager, python-keystoneclient, python-keystonemiddleware, python-kombu, python-straight-plugin, python-urllib3, release-notes-sus SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0081-1 Security update for ansible SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14536-1 ansible-10-10.6.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14244-1 ansible-9-9.8.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- GLSA-202006-11 vendor-advisory
- DSA-4950 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10685
- https://github.com/ansible/ansible/pull/68433