Safety CI > apihackers/docker-ansible

pyup/update-ansible-2.9.7-to-5.1.0

3 years, 11 months ago

73333119

Update ansible from 2.9.7 to 5.1.0

ansible 5.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	5.1.0	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.
ansible	5.1.0	>=2.5.0a1,<7.0.0	show A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

Package

Installed

Affected

Info

ansible

5.1.0

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

ansible

5.1.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup/update-ansible-2.9.7-to-5.0.1

4 years ago

778f1562

Update ansible from 2.9.7 to 5.0.1

ansible 5.0.1 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	5.0.1	<12.2.0	show Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.
ansible	5.0.1	>=2.5.0a1,<7.0.0	show A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

Package

Installed

Affected

Info

ansible

5.0.1

<12.2.0

show

Affected versions of the Ansible package are vulnerable to Information Disclosure due to improper redaction of sensitive credential fields in verbose log output. The community.general.keycloak_user module logs the credentials[].value parameter in plaintext when Ansible is executed with high verbosity (for example, -vvv), because this field is not marked with the no_log protection that is applied to other password parameters such as auth_password.

ansible

5.0.1

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup/update-ansible-2.9.7-to-5.0.0

4 years ago

d60bfe4d

Update ansible from 2.9.7 to 5.0.0

ansible 5.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup/update-ansible-2.9.7-to-4.9.0

4 years ago

c8c5a1c4

Update ansible from 2.9.7 to 4.9.0