Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the Python Cryptographic Authority package

Summary

The Python cryptography package which provides both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, message digests, and key derivation functions, is used by IBM Ansible plug-in. This library is vulnerable to CVE-2024-26130.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

Update Python to version >= 3.9

Update ibm.storage_virtualize to version >= 2.3.1

Verify that cryptography >= 42.0.5 is installed. It will be installed along with ibm.storage_virtualize level listed above.

Ansible collection ibm.storage_virtualize : <https://github.com/ansible-collections/ibm.storage_virtualize&gt;

Workarounds and Mitigations

None