Red Hat OpenStack Platform 17.1/ansible-collection-community-general

Red Hat · Package

4 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Ansible Community General Collection is vulnerable to exposure of sensitive informationCVE-2025-14010 · GHSA-8GGH-XWR9-3373Version ranges need review.	ansible Red Hat Ceph Storage 5/ansible-collection-community-general	PyPIRed Hat	Medium	Fix reported	2026-07-07
ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the IPA bind password in logs and process listingsCVE-2026-80158	Red Hat Ceph Storage 5/ansible-collection-community-general Red Hat Ceph Storage 9/ansible-collection-community-general	Red Hat	Medium	No fix reported	Not recorded
community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the Ansible controllerCVE-2026-87874	Red Hat Ceph Storage 5/ansible-collection-community-general Red Hat Ceph Storage 9/ansible-collection-community-general	Red Hat	Medium	No fix reported	Not recorded
community.general: community.general: OCAPI module_utils (ocapi_command, ocapi_info) hardcode validate_certs=False with no override, enabling TLS man-in-the-middle and credential disclosureCVE-2026-87872	Red Hat Ceph Storage 5/ansible-collection-community-general Red Hat Ceph Storage 9/ansible-collection-community-general	Red Hat	Medium	No fix reported	Not recorded