{"id":"CVE-2016-3096","aliases":["DEBIAN-CVE-2016-3096","EUVD-2016-0001","GHSA-rh6x-qvg7-rrmj","MGASA-2016-0163","PYSEC-2016-1","UBUNTU-CVE-2016-3096","openSUSE-SU-2024:10326-1","openSUSE-SU-2024:14244-1","openSUSE-SU-2024:14536-1","openSUSE-SU-2025:15605-1","openSUSE-SU-2025:15753-1","openSUSE-SU-2026:10944-1","openSUSE-SU-2026:12447-1"],"status":"published","title":"Link Following in ansible","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00468,"percentile":0.40739,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2016-05-05T16:26:44Z","modified":"2026-11-07T17:27:07Z","fixes":[{"ecosystem":"PyPI","package":"ansible","fixed_in":["1.9.6.1","2.0.2.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"ansible","fixed_in":["2.0.1.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ansible","fixed_in":["2.0.1.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ansible","fixed_in":["2.0.1.0-2"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"ansible","fixed_in":["1.9.6-1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ansible","fixed_in":["2.0.0.2-2ubuntu1.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.9.6.0"},{"fixed":"1.9.6.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0.0"},{"last_affected":"2.0.1.0"},{"fixed":"2.0.2.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1.0-2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0.0"},{"fixed":"2.0.2.0"}]}],"versions":["2.0.0","2.0.0.0","2.0.0.1","2.0.0.2","2.0.1.0"]},{"source":"osv","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6.1"}]}],"versions":["1.0","1.1","1.2","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.5","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.6","1.6.1","1.6.10","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7","1.7.1","1.7.2","1.8","1.8.1","1.8.2","1.8.3","1.8.4","1.9.0","1.9.0.1","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6"]},{"source":"osv","ecosystem":"Mageia:5","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1.mga5"}]}]},{"source":"osv","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2.0"}]}],"versions":["1.0","1.1","1.2","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.5","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.6","1.6.1","1.6.10","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7","1.7.1","1.7.2","1.8","1.8.1","1.8.2","1.8.3","1.8.4","1.9.0","1.9.0.1","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6","2.0.0","2.0.0.0","2.0.0.1","2.0.0.2","2.0.1.0"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.2-2ubuntu1.3"}]}],"versions":["1.9.2+dfsg-2","1.9.4-1","2.0.0.2-2","2.0.0.2-2ubuntu1","2.0.0.2-2ubuntu1.1","2.0.0.2-2ubuntu1.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.0-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-1.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6.0-1.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.11.0-1.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-1.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.7.0-1.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ansible-14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.6.0-1.1"}]}],"bundled":45}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"ansible"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322925","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201607-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://github.com/ansible/ansible-modules-extras/pull/1941","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","web"]},{"url":"https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3096","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rh6x-qvg7-rrmj","tags":["advisory"]},{"url":"https://github.com/ansible/ansible-modules-extras/commit/7c3999a92a1cd856ff9bc8913a93ff1aee8bffc3","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2016-1.yaml","tags":["web"]},{"url":"https://groups.google.com/forum/#!topic/ansible-announce/E80HLZilTU0","tags":["web"]},{"url":"https://groups.google.com/forum/#!topic/ansible-announce/tqiZbcWxYig","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-3096","tags":["advisory"]},{"url":"https://github.com/ansible/ansible","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2016-0163.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18275","tags":["report"]},{"url":"https://github.com/ansible/ansible/blob/stable-1.9/CHANGELOG.md","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-3096","tags":["report"]},{"url":"https://sources.debian.net/src/ansible/2.0.1.0-1/lib/ansible/modules/extras/cloud/lxc/lxc_container.py/?hl=523#L523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3096","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3583","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7LWEIR2LXW4QRWCY6HDMLUO2OTX5OZIC/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-3096","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:00:00Z","modified":"2024-08-05T23:47:56.875Z","updated_at":"2026-11-02T14:33:33.758954Z"}],"euvd":[{"id":"EUVD-2016-0001","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:00:00Z","modified":"2024-08-05T23:47:56Z","updated_at":"2026-11-03T02:22:51.132305Z"}],"ghsa":[{"id":"GHSA-rh6x-qvg7-rrmj","title":"Link Following in ansible","description":"The `create_script` function in the `lxc_container` module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) `/opt/.lxc-attach-script`, (2) the archived container in the `archive_path` directory, or the (3) `lxc-attach-script.log` or (4) `lxc-attach-script.err` files in the temporary directory.","status":"published","published":"2018-10-10T17:23:45Z","modified":"2024-09-04T18:55:11Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:38:01.080229Z"}],"nvd":[{"id":"CVE-2016-3096","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:59:04.263Z","modified":"2026-06-17T00:44:57.91Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:03:26.642445Z"}],"osv":[{"id":"CVE-2016-3096","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:59:04.263Z","modified":"2026-11-07T17:27:07.998669211Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-07T17:50:24.079961Z"},{"id":"DEBIAN-CVE-2016-3096","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:59:04.263Z","modified":"2026-09-22T07:02:58.809852385Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"GHSA-rh6x-qvg7-rrmj","title":"Link Following in ansible","description":"The `create_script` function in the `lxc_container` module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) `/opt/.lxc-attach-script`, (2) the archived container in the `archive_path` directory, or the (3) `lxc-attach-script.log` or (4) `lxc-attach-script.err` files in the temporary directory.","status":"published","published":"2018-10-10T17:23:45Z","modified":"2024-09-04T19:10:53.885962Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T15:46:55.877614Z"},{"id":"UBUNTU-CVE-2016-3096","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:59:00Z","modified":"2025-07-16T06:46:59.423227Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"MGASA-2016-0163","title":"Updated ansible packages fix CVE-2016-3096","description":"Updated ansible package fixes security vulnerability:\n\nA vulnerability in lxc_container, ansible module, was found allowing to get\nroot inside the container. The problem is in the create_script function, which\ntries to write to /opt/.lxc-attach-script inside of the container. If the\nattacker can write to /opt/.lxc-attach-script before that, he can overwrite\narbitrary files or execute commands as root (CVE-2016-3096).\n","status":"published","published":"2016-05-05T16:26:44Z","modified":"2026-04-16T06:22:42.626309647Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10326-1","title":"ansible-2.2.0.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-2.2.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:59:57.565767Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14244-1","title":"ansible-9-9.8.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-9-9.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-08T00:00:00Z","modified":"2025-05-07T18:09:02.34487Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14536-1","title":"ansible-10-10.6.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-10-10.6.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-02T00:00:00Z","modified":"2026-02-04T02:24:01.991152Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:15605-1","title":"ansible-11-11.11.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-11-11.11.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-08T00:00:00Z","modified":"2026-03-23T04:53:59.61995Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15753-1","title":"ansible-12-12.2.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-12-12.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-21T00:00:00Z","modified":"2026-02-04T03:39:28.583236Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:10944-1","title":"ansible-13-13.7.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-13-13.7.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-06-04T09:00:05.946811249Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:12447-1","title":"ansible-14-14.6.0-1.1 on GA media","description":"These are all security issues fixed in the ansible-14-14.6.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-06T00:00:00Z","modified":"2026-11-07T17:23:14.32527018Z","updated_at":"2026-11-07T17:50:39.727056Z"},{"id":"PYSEC-2016-1","description":"The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.","status":"published","published":"2016-06-03T14:59:00Z","modified":"2023-11-08T03:58:25.68574Z","updated_at":"2026-11-02T15:52:51.645172Z"}]}}