RHSA-2024:2246MediumCVSS 5.0
Red Hat Security Advisory: ansible-core bug fix, enhancement, and security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2024-0690 — ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration
🎯 Affected products10
- Red Hat Enterprise Linux AppStream (v. 9)
- ansible-core-1:2.14.14-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-core-1:2.14.14-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-core-1:2.14.14-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-core-1:2.14.14-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-core-1:2.14.14-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-test-1:2.14.14-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-test-1:2.14.14-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-test-1:2.14.14-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
- ansible-test-1:2.14.14-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Explicitly setting 'no_log' within the playbook will prevent the output from containing potentially sensitive information.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2024:2246
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2259013
- externalhttps://issues.redhat.com/browse/RHEL-18950
- externalhttps://issues.redhat.com/browse/RHEL-19298
- externalhttps://issues.redhat.com/browse/RHEL-23783
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2246.json