{"id":277,"sha1":"2e52b13c9a935c1954d73b73b511033f4bcef622","playbook":{"id":277,"items":{"plays":1,"tasks":3,"results":3,"hosts":1,"files":1,"records":0},"arguments":{"version":null,"verbosity":4,"private_key_file":"/home/ssh-gateway/.ssh/id_rsa","remote_user":"root","connection":"ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":false,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/ssh-gateway/ansible/hosts_CTListFromObasDB"],"listhosts":false,"subset":"kuly-c7-uk.uk.easy-server.com","extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":30,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["RM9537.yaml"]},"labels":[{"id":1,"name":"remote_user:root"},{"id":2,"name":"check:False"},{"id":3,"name":"tags:all"},{"id":27,"name":"subset:kuly-c7-uk.uk.easy-server.com"}],"started":"2024-05-08T13:07:04.860637+01:00","ended":"2024-05-08T13:07:08.139946+01:00","duration":"00:00:03.279309","name":null,"ansible_version":"2.16.4","client_version":"1.7.1","python_version":"3.10.10","server_version":"1.7.2.dev2","status":"failed","path":"/home/ssh-gateway/ansible/RM9537.yaml","controller":"ssh-gw-4.layershift.com","user":"root"},"content":"---\n- name: Mitigating CVE-2024-2961\n  hosts: all, !wolf-serv1.uk.plesk-server.com\n  gather_facts: false\n\n  tasks:\n    - name: Check if gconv-modules-extra.conf exists\n      ansible.builtin.stat:\n        path: /usr/lib64/gconv/gconv-modules.d/gconv-modules-extra.conf\n      register: gconv_modules_extra_exist\n    - name: Check if gconv-modules exists\n      ansible.builtin.stat:\n        path: /usr/lib64/gconv/gconv-modules\n      register: gconv_modules_exist\n    - name: Match and comment out block in the configuration file\n      ansible.builtin.lineinfile:\n        backup: true\n        path: \"{{ item.stat.path }}\"\n        regexp: '^#?\\s*alias\\s+ISO2022CNEXT\\/\\/\\s+ISO-2022-CN-EXT\\/\\/$|^#?\\s*module\\s+ISO-2022-CN-EXT\\/\\/\\s+INTERNAL\\s+ISO-2022-CN-EXT\\s+1$|^#?\\s*module\\s+INTERNAL\\s+ISO-2022-CN-EXT\\/\\/\\s+ISO-2022-CN-EXT\\s+1$'\n        line: '# \\g<0>'\n      register: config_changes\n      notify:\n        - run_iconvconfig\n      when: gconv_modules_extra_exist.stat.exists or gconv_modules_exist.stat.exists\n\n  handlers:\n    - name: Run iconvconfig\n      ansible.builtin.command: iconvconfig\n      when: config_changes.changed\n      listen: run_iconvconfig\n","created":"2024-05-08T13:07:04.912037+01:00","updated":"2024-05-08T13:07:04.912061+01:00","path":"/home/ssh-gateway/ansible/RM9537.yaml"}