Search for packages
| purl | pkg:deb/debian/ansible@2.2.0.0-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-hfxe-jjf5-nqd1 | A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key. |
CVE-2016-8614
GHSA-cmwx-9m2h-x7v4 PYSEC-2018-37 |
| VCID-q4q1-aueh-sub2 | Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as. |
CVE-2016-8628
GHSA-jg4f-jqm5-4mgq PYSEC-2018-38 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T10:40:52.299810+00:00 | Debian Importer | Fixing | VCID-hfxe-jjf5-nqd1 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:28:05.393433+00:00 | Debian Importer | Fixing | VCID-q4q1-aueh-sub2 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T07:13:29.705982+00:00 | Debian Importer | Fixing | VCID-hfxe-jjf5-nqd1 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T18:18:51.073579+00:00 | Debian Importer | Fixing | VCID-q4q1-aueh-sub2 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-02T17:09:03.582385+00:00 | Debian Importer | Fixing | VCID-hfxe-jjf5-nqd1 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-02T17:04:56.874573+00:00 | Debian Importer | Fixing | VCID-q4q1-aueh-sub2 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |