--- # Copyright (c) 2021 Luca Berton # # Permission is hereby granted, free of charge, to any person obtaining a copy # of this software and associated documentation files (the "Software"), to deal # in the Software without restriction, including without limitation the rights # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell # copies of the Software, and to permit persons to whom the Software is # furnished to do so, subject to the following conditions: # # The above copyright notice and this permission notice shall be included in all # copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE # SOFTWARE. rhsb_url: >- https://access.redhat.com/security/vulnerabilities/RHSB-2022-003 intro: | This playbook is for use with version 1.0 of the CVE-2022-22963 detection script. Please refer to the Red Hat Security Bulletin for up-to-date information and adjust the playbook variables accordingly. {{ rhsb_url }}. vulnerable: | System MIGHT be vulnerable CVE-2022-22963 not_vulnerable: | System IS NOT vulnerable to CVE-2022-22963 report_txt: "/report/affected_RHSB-2022-003*.txt" sh_detector: "cve-2022-22963--2022-04-14-1149.sh" sh_signature: "cve-2022-22963--2022-04-14-1149.sh.asc" detector_baseurl: "https://access.redhat.com/sites/default/files/" force_download: false detector_path: "/home/" detector_dir: "/opt/cve-2022-22963/" detector_run_dir: "tmp" detector_options: '-n -d --no-progress --scan {{ detector_path }}' gpg_keyid: "7514F77D8366B0D9" gpg_server: "pgp.mit.edu" gpg_public_key: 'gpg --keyserver {{ gpg_server }} --recv {{ gpg_keyid }}' clean_run_before: true delete_after: false verify_gpg: true