A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key
    fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject
    this key instead of the correct key. (CVE-2016-8614)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7330-1 advisory.

    It was discovered that Ansible did not properly verify certain fields of X.509 certificates. An attacker     could possibly use this issue to spoof SSL servers if they were able to intercept network communications.
    This issue only affected Ubuntu 14.04 LTS. (CVE-2015-3908)

    Martin Carpenter discovered that certain connection plugins for Ansible did not properly restrict users.
    An attacker with local access could possibly use this issue to escape a restricted environment via     symbolic links misuse. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-6240)

    Robin Schneider discovered that Ansible's apt_key module did not properly verify key fingerprints. A     remote attacker could possibly use this issue to perform key injection, leading to the access of sensitive     information. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8614)

    It was discovered that Ansible would expose passwords in certain instances. An attacker could possibly use     specially crafted input related to this issue to access sensitive information. This issue only affected     Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-10206)

    It was discovered that Ansible incorrectly logged sensitive information. An attacker with local access     could possibly use this issue to access sensitive information. This issue only affected Ubuntu 14.04 LTS,     Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2019-14846)

    It was discovered that Ansible's solaris_zone module accepted input without performing input checking. A     remote attacker could possibly use this issue to enable the execution of arbitrary code. This issue only     affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-14904)

    It was discovered that Ansible did not generate sufficiently random values, which could lead to the     exposure of passwords. An attacker could possibly use this issue to access sensitive information. This     issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-10729)

    It was discovered that Ansible's svn module could disclose passwords to users within the same node. An     attacker could possibly use this issue to access sensitive information. (CVE-2020-1739)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1509-1 advisory.

    POS_Image-Graphical7 was updated to version 0.1.1710765237.46af599:

    - Version 0.1.1710765237.46af599

      * Moved image services to dracut-saltboot package
      * Use salt bundle

    - Version 0.1.1645440615.7f1328c

      * Removed deprecated kiwi functions

    POS_Image-JeOS7 was updated to version 0.1.1710765237.46af599:

    - Version 0.1.1710765237.46af599

      * Moved image services to dracut-saltboot package
      * Use salt bundle

    - Version 0.1.1645440615.7f1328c

      * Removed deprecated kiwi functions

    ansible received the following fixes:

    - Security issues fixed:

      * CVE-2023-5764: Address issues where internal templating can cause unsafe         variables to lose their unsafe designation (bsc#1216854)

        - Breaking changes:
          assert - Nested templating may result in an inability for the conditional           to be evaluated. See the porting guide for more information.

      * CVE-2024-0690: Address issue where ANSIBLE_NO_LOG was ignored (bsc#1219002)
      * CVE-2020-14365: Ensure that packages are GPG validated (bsc#1175993)
      * CVE-2020-10744: Fixed insecure temporary directory creation (bsc#1171823)
      * CVE-2018-10874: Fixed inventory variables loading from current working directory when running ad-hoc     command that         can lead to code execution (bsc#1099805)

    - Bugs fixed:

      * Don't Require python-coverage, it is needed only for testing (bsc#1177948)

    dracut-saltboot was updated to version 0.1.1710765237.46af599:

    - Version 0.1.1710765237.46af599

      * Load only first available leaseinfo (bsc#1221092)

    - Version 0.1.1681904360.84ef141

    grafana was updated to version 9.5.18:

    - Grafana now requires Go 1.20
    - Security issues fixed:

      * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155)
      * CVE-2023-6152: Add email verification when updating user email (bsc#1219912)

    - Other non-security related changes:

      * Version 9.5.17:

        - [FEATURE] Alerting: Backport use Alertmanager API v2

      * Version 9.5.16:

        - [BUGFIX] Annotations: Split cleanup into separate queries and           deletes to avoid deadlocks on MySQL

      * Version 9.5.15:

        - [FEATURE] Alerting: Attempt to retry retryable errors

      * Version 9.5.14:

        - [BUGFIX] Alerting: Fix state manager to not keep           datasource_uid and ref_id labels in state after Error
        - [BUGFIX] Transformations: Config overrides being lost when           config from query transform is applied
        - [BUGFIX] LDAP: Fix enable users on successfull login

      * Version 9.5.13:

        - [BUGFIX] BrowseDashboards: Only remember the most recent           expanded folder
        - [BUGFIX] Licensing: Pass func to update env variables when           starting plugin

      * Version 9.5.12:

        - [FEATURE] Azure: Add support for Workload Identity           authentication

      * Version 9.5.9:

        - [FEATURE] SSE: Fix DSNode to not panic when response has empty           response
        - [FEATURE] Prometheus: Handle the response with different field           key order
        - [BUGFIX] LDAP: Fix user disabling

    mgr-daemon was updated to version 4.3.9-0:

    - Version 4.3.9-0

      * Update translation strings

    spacecmd was updated to version 4.3.27-0:

    - Version 4.3.27-0

      * Update translation strings

    spacewalk-client-tools was updated to version 4.3.19-0:

    - Version 4.3.19-0

      * Update translation strings

    spacewalk-koan was updated to version version 4.3.6-0:

    - Version 4.3.6-0

      * Change Docker image location for test

    uyuni-common-libs was updated to version 4.3.10-0:

    - Version 4.3.10-0

      * Add support for package signature type V4 RSA/SHA384
      * Add support for package signature type V4 RSA/SHA512 (bsc#1221465)

    uyuni-proxy-systemd-services was updated to version 4.3.12-0:

    - Version 4.3.12-0

      * Update to SUSE Manager 4.3.12

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ansible to version 2.4.1.0 fixes the following vulnerabilities :

  - CVE-2017-7481: Security issue with lookup return not     tainting the jinja2 environment (bsc#1038785)

  - CVE-2016-9587: host to controller command execution     vulnerability (bsc#1019021)

  - CVE-2016-8628: Command injection by compromised server     via fact variables (bsc#1008037)

  - CVE-2016-8614: Improper verification of key fingerprints     in apt_key module (bsc#1008038)

  - CVE-2017-7550: jenkins_plugin module may have exposed     passwords in remote host logs (bsc#1065872)

This update also contains a number of upstream bug fixes and improvements.

Add patch to fix dnf module groupinstall handling

----

Update to new ansible 2.2 version. 

For full changes see :

https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
422305	SCA: security update for ansible (GHSA-cmwx-9m2h-x7v4)	Tenable Cloud Security	SCA Checks	high
422305	SCA: security update for ansible (GHSA-cmwx-9m2h-x7v4)	Tenable Self-Hosted Container Security	SCA Checks	high
232217	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Ansible vulnerabilities (USN-7330-1)	Nessus	Ubuntu Local Security Checks	high
195097	SUSE SLES15: POS_Image-Graphical7 / POS_Image-JeOS7 / ansible / ansible-doc / etc (SUSE-SU-2024:1509-1)	Nessus	SuSE Local Security Checks	critical
104522	openSUSE Security Update : ansible (openSUSE-2017-1259)	Nessus	SuSE Local Security Checks	critical
94999	Fedora 25 : ansible (2016-3ccb098630)	Nessus	Fedora Local Security Checks	critical
94614	Fedora 24 : ansible (2016-3113e71193)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2016-8614

high

Tenable Plugins

high

high

high

critical

critical

critical

critical