Red Hat Security Advisory

RHSA-2020:0218

Ansible security and bug fix update (2.9.4)

Released 2020-01-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2 for RHEL 7 ansible-2.9.4-1.el7ae, ansible-test-2.9.4-1.el7ae
Red Hat Ansible Engine 2 for RHEL 8 ansible-2.9.4-1.el8ae, ansible-test-2.9.4-1.el8ae

Fixes 2 records

TI-2019-11107 CVE-2019-14904 · GHSA-gwr8-5j83-483c

Improper input validation in Ansible

LOW 32

A flaw was found in the solaris_zone module from the Ansible Community modules.

CVSS 3.1HIGH 7.3 Local High privileges No interaction EPSS 0.00418 Published 2020-08-25 Partial fix · 2.7.16, 2.8.8 +1 CWE-20

TI-2019-11108 CVE-2019-14905 · GHSA-frxj-5j27-f8rf

Improper input validation in Red Hat Ansible

LOW 26

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on…

CVSS 3.1MEDIUM 5.6 Local High privileges No interaction EPSS 0.00713 Published 2020-03-31 Partial fix · 2.9.3, 2.8.8 +1 CWE-20