CVE-2023-5764
Fixed in a distro release EPSS <1%CVSS 7.1
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.
Products: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible-core | 2.16.1 |
| PyPI | ansible-core | 2.15.8 |
| PyPI | ansible-core | 2.14.12 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | ansible-core | 2.15.3-1.amzn2023.0.2 |
| Amazon Linux 2023 | ansible-test | 2.15.3-1.amzn2023.0.2 |
| Debian 12 | ansible | 5.4.0-1 |
| Debian 12 | ansible-core | 2.14.16-0+deb12u1 |
| Debian 13 | ansible | 5.4.0-1 |
| Debian 13 | ansible-core | 2.14.13-1 |
| Debian 14 | ansible | 5.4.0-1 |
| Debian 14 | ansible-core | 2.14.13-1 |
| Red Hat ansible automation platform 2.4 | ansible-core | 1:2.15.8-1.el8ap |
| Red Hat ansible automation platform 2.4 | ansible-core | 1:2.15.8-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-galaxy-importer | 0:0.4.18-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-galaxy-importer | 0:0.4.18-1.el9ap |
| Red Hat ansible automation platform 2.4 | python39-galaxy-importer | 0:0.4.18-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-galaxy-importer | 0:0.4.18-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | ansible-core | 1:2.15.8-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | ansible-core | 1:2.15.8-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | ansible-core | 1:2.15.8-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | ansible-core | 1:2.15.8-1.el9ap |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| SUSE Manager Client Tools 15 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools 15 | grafana | 9.5.18-150000.1.63.2 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.9-150000.1.47.2 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.27-150000.3.116.2 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.19-150000.3.89.2 |
| SUSE Manager Client Tools 15 | spacewalk-koan | 4.3.6-150000.3.33.2 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.10-150000.1.39.2 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Client Tools 15-BETA | POS_Image-Graphical7 | 0.1.1710765237.46af599-159000.3.24.2 |
| SUSE Manager Client Tools 15-BETA | POS_Image-JeOS7 | 0.1.1710765237.46af599-159000.3.24.2 |
| SUSE Manager Client Tools 15-BETA | ansible | 2.9.27-159000.3.12.2 |
| SUSE Manager Client Tools 15-BETA | dracut-saltboot | 0.1.1710765237.46af599-159000.3.33.2 |
| SUSE Manager Client Tools 15-BETA | grafana | 9.5.16-159000.4.30.2 |
| SUSE Manager Client Tools 15-BETA | spacecmd | 5.0.5-159000.6.48.2 |
| SUSE Manager Client Tools 15-BETA | spacewalk-client-tools | 5.0.4-159000.6.54.2 |
| SUSE Manager Client Tools 15-BETA | supportutils-plugin-susemanager-client | 5.0.3-159000.6.21.2 |
| SUSE Manager Client Tools 15-BETA | uyuni-tools | 0.1.7-159000.3.8.1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-prometheus-node_exporter | 1.5.0-159000.6.2.1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-tools | 0.1.7-159000.3.8.1 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| Ubuntu 22.04 LTS | ansible-core | no fix |
| Ubuntu 24.04 LTS | ansible-core | no fix |
| Ubuntu 25.10 | ansible-core | no fix |
| Ubuntu 26.04 LTS | ansible-core | no fix |
| Ubuntu 26.10 | ansible-core | no fix |
| Ubuntu Pro 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.3+esm2 |
| Ubuntu Pro 18.04 LTS | ansible | 2.5.1+dfsg-1ubuntu0.1+esm2 |
| Ubuntu Pro 20.04 LTS | ansible | 2.9.6+dfsg-1ubuntu0.1~esm2 |
| Ubuntu Pro 22.04 LTS | ansible | 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4 |
| openSUSE Leap 15.5 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | ansible | 2.9.27-150000.1.17.2 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| openSUSE Leap 15.5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| openSUSE Leap 15.5 | spacecmd | 4.3.27-150000.3.116.2 |
| openSUSE Tumbleweed | ansible-core | 2.16.9-1.1 |
| openSUSE Tumbleweed | ansible-core-2.17 | 2.17.6-1.1 |
| openSUSE Tumbleweed | ansible-core-2.18 | 2.18.10-2.1 |
| openSUSE Tumbleweed | ansible-core-2.19 | 2.19.4-1.1 |
| openSUSE Tumbleweed | ansible-core-2.20 | 2.20.6-1.1 |
| openSUSE Tumbleweed | ansible-documentation | 2.15.7-1.1 |