A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
This PR contains the following updates:
==6.5.0->==8.5.0GitHub Vulnerability Alerts
CVE-2022-3697
A flaw was found in Ansible in the amazon.aws collection when using the
tower_callbackparameter from theamazon.aws.ec2_instancemodule. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.CVE-2023-5115
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Release Notes
ansible-community/ansible-build-data (ansible)
### [`v8.3.0`](https://togithub.com/ansible-community/ansible-build-data/compare/8.2.0...8.3.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/8.2.0...8.3.0) ### [`v8.2.0`](https://togithub.com/ansible-community/ansible-build-data/compare/8.1.0...8.2.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/8.1.0...8.2.0) ### [`v8.1.0`](https://togithub.com/ansible-community/ansible-build-data/compare/8.0.0...8.1.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/8.0.0...8.1.0) ### [`v8.0.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.7.0...8.0.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.7.0...8.0.0) ### [`v7.7.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.6.0...7.7.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.6.0...7.7.0) ### [`v7.6.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.5.0...7.6.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.5.0...7.6.0) ### [`v7.5.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.4.0...7.5.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.4.0...7.5.0) ### [`v7.4.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.3.0...7.4.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.3.0...7.4.0) ### [`v7.1.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.0.0...7.1.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.0.0...7.1.0) ### [`v7.0.0`](https://togithub.com/ansible-community/ansible-build-data/compare/6.7.0...7.0.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/6.7.0...7.0.0) ### [`v6.7.0`](https://togithub.com/ansible-community/ansible-build-data/compare/6.6.0...6.7.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/6.6.0...6.7.0) ### [`v6.6.0`](https://togithub.com/ansible-community/ansible-build-data/compare/6.5.0...6.6.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/6.5.0...6.6.0)Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.