Safety CI > apihackers/docker-ansible

pyup/update-ansible-2.9.7-to-9.0.1

2 years ago

e0de2d47

Update ansible from 2.9.7 to 9.0.1

ansible 9.0.1 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	9.0.1	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

9.0.1

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-9.0.0

2 years ago

9aed692d

Update ansible from 2.9.7 to 9.0.0

ansible 9.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup/update-ansible-2.9.7-to-8.6.1

2 years, 1 month ago

685a8acb

Update ansible from 2.9.7 to 8.6.1

ansible 8.6.1 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.6.1	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.6.1

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.6.0

2 years, 1 month ago

db34455e

Update ansible from 2.9.7 to 8.6.0

ansible 8.6.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.6.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.6.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.5.0

2 years, 2 months ago

a5fe4df5

Update ansible from 2.9.7 to 8.5.0

ansible 8.5.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.5.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.5.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.4.0

2 years, 3 months ago

09224d40

Update ansible from 2.9.7 to 8.4.0

ansible 8.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.4.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.4.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.3.0

2 years, 4 months ago

b4e3a8c8

Update ansible from 2.9.7 to 8.3.0

ansible 8.3.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.3.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.3.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.2.0

2 years, 4 months ago

04ad9416

Update ansible from 2.9.7 to 8.2.0

ansible 8.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.2.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.2.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.1.0

2 years, 5 months ago

4ea824d5

Update ansible from 2.9.7 to 8.1.0

ansible 8.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.1.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.1.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-8.0.0

2 years, 6 months ago

a517a68b

Update ansible from 2.9.7 to 8.0.0

ansible 8.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	8.0.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

8.0.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-7.6.0

2 years, 6 months ago

0036d9cc

Update ansible from 2.9.7 to 7.6.0

ansible 7.6.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	7.6.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

7.6.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-7.5.0

2 years, 7 months ago

59bca1b6

Update ansible from 2.9.7 to 7.5.0

ansible 7.5.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	7.5.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

7.5.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-7.4.0

2 years, 8 months ago

88715deb

Update ansible from 2.9.7 to 7.4.0

ansible 7.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	7.4.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

7.4.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-7.3.0

2 years, 9 months ago

02bf68f4

Update ansible from 2.9.7 to 7.3.0

ansible 7.3.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	7.3.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

Package

Installed

Affected

Info

ansible

7.3.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

pyup/update-ansible-2.9.7-to-6.4.0

3 years, 3 months ago

7f4aed9c

Update ansible from 2.9.7 to 6.4.0

ansible 6.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	6.4.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.
ansible	6.4.0	>=2.5.0a1,<7.0.0	show A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

Package

Installed

Affected

Info

ansible

6.4.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

ansible

6.4.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.