An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
This PR contains the following updates:
==7.2.0
->==8.5.0
GitHub Vulnerability Alerts
CVE-2023-5115
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Release Notes
ansible-community/ansible-build-data (ansible)
### [`v8.3.0`](https://togithub.com/ansible-community/ansible-build-data/compare/8.2.0...8.3.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/8.2.0...8.3.0) ### [`v8.2.0`](https://togithub.com/ansible-community/ansible-build-data/compare/8.1.0...8.2.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/8.1.0...8.2.0) ### [`v8.1.0`](https://togithub.com/ansible-community/ansible-build-data/compare/8.0.0...8.1.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/8.0.0...8.1.0) ### [`v8.0.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.7.0...8.0.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.7.0...8.0.0) ### [`v7.7.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.6.0...7.7.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.6.0...7.7.0) ### [`v7.6.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.5.0...7.6.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.5.0...7.6.0) ### [`v7.5.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.4.0...7.5.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.4.0...7.5.0) ### [`v7.4.0`](https://togithub.com/ansible-community/ansible-build-data/compare/7.3.0...7.4.0) [Compare Source](https://togithub.com/ansible-community/ansible-build-data/compare/7.3.0...7.4.0)Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.