Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency ansible to v7 [SECURITY] #124

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Mar 24, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ansible (source) ==5.4.0 -> ==7.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-3697

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

CVE-2023-5115

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.


Release Notes

ansible-community/ansible-build-data (ansible)

v7.0.0

Compare Source

v6.7.0

Compare Source

v6.6.0

Compare Source

v6.5.0

Compare Source

v6.4.0

Compare Source

v6.3.0

Compare Source

v6.2.0

Compare Source

v6.1.0

Compare Source

v5.9.0

Compare Source

v5.8.0

Compare Source

v5.7.1

Compare Source

v5.7.0

Compare Source

v5.6.0

Compare Source

v5.5.0

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate
Copy link
Author

renovate bot commented Mar 24, 2023

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.


  • Branch has one or more failed status checks

@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from bff758c to 34fbcf8 Compare March 25, 2023 02:53
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Mar 25, 2023
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] May 28, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch 2 times, most recently from 2184afe to 938e9dc Compare May 28, 2023 12:50
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] May 28, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 938e9dc to eb2380a Compare June 18, 2023 08:39
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Jun 18, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from eb2380a to 23e3f56 Compare June 18, 2023 10:47
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Jun 18, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 23e3f56 to 81a400b Compare June 19, 2023 12:44
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Jun 19, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 81a400b to 88e6d78 Compare June 19, 2023 18:35
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Jun 19, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 88e6d78 to aa43826 Compare July 9, 2023 10:10
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Jul 9, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from aa43826 to baefbb7 Compare July 9, 2023 13:48
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Jul 9, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from baefbb7 to 25a3229 Compare August 9, 2023 13:53
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Aug 9, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 25a3229 to 4949da5 Compare August 9, 2023 16:09
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Aug 9, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 4949da5 to 48070d0 Compare August 22, 2023 21:29
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Aug 22, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 48070d0 to 1a37118 Compare August 23, 2023 02:19
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Aug 23, 2023
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Sep 19, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch 2 times, most recently from ee92adb to aec920c Compare September 19, 2023 15:12
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Sep 19, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from aec920c to dd1e0b0 Compare September 26, 2023 15:08
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Sep 26, 2023
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Sep 26, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from dd1e0b0 to 65495b6 Compare September 26, 2023 19:50
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 65495b6 to e90da91 Compare November 16, 2023 11:34
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Nov 16, 2023
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Nov 16, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from e90da91 to 533f716 Compare November 16, 2023 13:41
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 533f716 to c716a95 Compare December 3, 2023 10:02
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Dec 3, 2023
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Dec 3, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from c716a95 to c265ebb Compare December 3, 2023 13:39
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from c265ebb to c906676 Compare January 4, 2024 15:52
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Jan 4, 2024
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from c906676 to 0058950 Compare January 4, 2024 18:16
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Jan 4, 2024
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 0058950 to b9f24f9 Compare January 9, 2024 11:41
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Jan 9, 2024
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from b9f24f9 to 16d1d24 Compare January 10, 2024 20:35
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Jan 10, 2024
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 16d1d24 to fe61d57 Compare January 16, 2024 12:31
@renovate renovate bot changed the title Update dependency ansible to v7 [SECURITY] Update dependency ansible to v5.10.0 [SECURITY] Jan 16, 2024
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from fe61d57 to 931c17b Compare January 16, 2024 16:57
@renovate renovate bot changed the title Update dependency ansible to v5.10.0 [SECURITY] Update dependency ansible to v7 [SECURITY] Jan 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants