Update dependency ansible to v7 [SECURITY] #124
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Author
Branch automerge failureThis PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
|
renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from bff758c to 34fbcf8 Compare renovate bot changed the title renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch 2 times, most recently from 2184afe to 938e9dc Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 938e9dc to eb2380a Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from eb2380a to 23e3f56 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 23e3f56 to 81a400b Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 81a400b to 88e6d78 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 88e6d78 to aa43826 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from aa43826 to baefbb7 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from baefbb7 to 25a3229 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 25a3229 to 4949da5 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 4949da5 to 48070d0 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 48070d0 to 1a37118 Compare renovate bot changed the title renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch 2 times, most recently from ee92adb to aec920c Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from aec920c to dd1e0b0 Compare renovate bot changed the title renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from dd1e0b0 to 65495b6 Compare renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 65495b6 to e90da91 Compare renovate bot changed the title renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from e90da91 to 533f716 Compare renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 533f716 to c716a95 Compare renovate bot changed the title renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from c716a95 to c265ebb Compare renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from c265ebb to c906676 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from c906676 to 0058950 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 0058950 to b9f24f9 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from b9f24f9 to 16d1d24 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 16d1d24 to fe61d57 Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from fe61d57 to 931c17b Compare renovate bot changed the title renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 931c17b to 5fa2cc7 Compare renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 5fa2cc7 to 15739ab Compare renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 15739ab to fcd26ba Compare Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==5.4.0->==7.0.0GitHub Vulnerability Alerts
CVE-2022-3697
A flaw was found in Ansible in the amazon.aws collection when using the
tower_callbackparameter from theamazon.aws.ec2_instancemodule. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.CVE-2023-5115
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Release Notes
ansible-community/ansible-build-data (ansible)
v7.0.0Compare Source
v6.7.0Compare Source
v6.6.0Compare Source
v6.5.0Compare Source
v6.4.0Compare Source
v6.3.0Compare Source
v6.2.0Compare Source
v6.1.0Compare Source
v5.9.0Compare Source
v5.8.0Compare Source
v5.7.1Compare Source
v5.7.0Compare Source
v5.6.0Compare Source
v5.5.0Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.