RHSA-2021:0663: Moderate: Ansible security and bug fix update (2.9.18)
Ansible is a simple model-driven configuration management, multi-nodedeployment, and remote-task execution system. Ansible works over SSH anddoes not require any software or daemons to be installed on remote nodes.Extension modules can be written in any language and are transferred tomanaged machines automatically.The following packages have been upgraded to a newer upstream version:ansible (2.9.18)Bug Fix(es): CVE-2021-20178 ansible: user data leak in snmpfacts module CVE-2021-20180 ansible module: bitbucketpipelinevariable exposes secured values CVE-2021-20191 ansible: multiple collections exposes secured values CVE-2021-20228 ansible: basic.py nolog with fallback option See:https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst for details on bug fixes in this release.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0663?
The severity of RHSA-2021:0663 is rated as important due to potential impacts on system security and integrity.
How do I fix RHSA-2021:0663?
To fix RHSA-2021:0663, update to the patched version of Ansible specified in the advisory, which is 2.9.18-1.el8ae or 2.9.18-1.el7ae.
Which systems are affected by RHSA-2021:0663?
RHSA-2021:0663 affects Ansible versions prior to 2.9.18-1.el8ae and 2.9.18-1.el7ae on Red Hat Enterprise Linux.
Does RHSA-2021:0663 require a reboot after the fix?
Typically, applying the update for RHSA-2021:0663 does not require a system reboot, but it is advisable to check application stability.
Is there a risk of data loss associated with RHSA-2021:0663?
While there is no direct indication of data loss due to RHSA-2021:0663, it is recommended to back up critical data when applying updates.