Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 29, 2023

This PR contains the following updates:

Package Change Age Confidence
ansible (source) ==7.2.0 -> ==12.2.0 age confidence

GitHub Vulnerability Alerts

CVE-2023-5115

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.

CVE-2025-14010

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.


Release Notes

ansible-community/ansible-build-data (ansible)

v12.2.0

Compare Source

v12.1.0

Compare Source

v12.0.0

Compare Source

v11.12.0

Compare Source

v11.11.0

Compare Source

v11.10.0

Compare Source

v11.9.0

Compare Source

v11.8.0

Compare Source

v11.7.0

Compare Source

v11.6.0

Compare Source

v11.5.0

Compare Source

v11.4.0

Compare Source

v11.3.0

Compare Source

v11.2.0

Compare Source

v11.1.0

Compare Source

v11.0.0

Compare Source

v10.7.0

Compare Source

v10.6.0

Compare Source

v10.5.0

Compare Source

v10.4.0

Compare Source

v10.3.0

Compare Source

v10.2.0

Compare Source

v10.1.0

Compare Source

v10.0.1

Compare Source

v9.13.0

Compare Source

v9.12.0

Compare Source

v9.11.0

Compare Source

v9.10.0

Compare Source

v9.9.0

Compare Source

v9.8.0

Compare Source

v9.7.0

Compare Source

v9.6.1

Compare Source

v9.5.1

Compare Source

v9.4.0

Compare Source

v9.3.0

Compare Source

v9.2.0

Compare Source

v9.1.0

Compare Source

v9.0.1

Compare Source

v8.7.0

Compare Source

v8.6.1

Compare Source

v8.6.0

Compare Source

v8.3.0

Compare Source

v8.2.0

Compare Source

v8.1.0

Compare Source

v8.0.0

Compare Source

v7.7.0

Compare Source

v7.6.0

Compare Source

v7.5.0

Compare Source

v7.4.0

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Dec 29, 2023
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch 2 times, most recently from ce400d4 to d8921c7 Compare March 5, 2024 12:00
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from d8921c7 to 886ec7e Compare March 19, 2024 09:47
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 886ec7e to b6bf12b Compare April 5, 2024 10:04
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from b6bf12b to 8c8201b Compare July 24, 2024 15:25
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 8c8201b to 0532999 Compare September 23, 2024 16:26
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 0532999 to 45cebbf Compare October 3, 2024 09:02
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch 2 times, most recently from aaa2715 to cafd626 Compare January 10, 2025 14:12
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from cafd626 to 24227c9 Compare December 5, 2025 05:27
@renovate renovate bot changed the title ⬆️(project) upgrade ansible to v8 [SECURITY] ⬆️(project) upgrade ansible to v12 [SECURITY] Dec 5, 2025
| datasource | package | from  | to     |
| ---------- | ------- | ----- | ------ |
| pypi       | ansible | 7.2.0 | 12.2.0 |
@renovate renovate bot force-pushed the renovate/pypi-ansible-vulnerability branch from 24227c9 to 2152d5c Compare December 6, 2025 01:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant