Red Hat Security AdvisoryRHSA-2020:3600
Ansible security and bug fix update (2.8.15)
Released 2020-09-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Engine 2.8 for RHEL 7 Server ansible-2.8.15-1.el7ae
- Red Hat Ansible Engine 2.8 for RHEL 8 ansible-2.8.15-1.el8ae
Fixes 4 records
Priority LOW 31
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2020-09-23 · Partial fix · 2.8.15, 2.9.13 CWE-347
Priority LOW 26
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00573 · Published 2020-09-11 · Partial fix · 2.10.0 CWE-532
Priority LOW 25
A flaw was found in the Ansible Engine when using module_args.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00407 · Published 2020-09-11 · Partial fix · 2.8.14, 2.9.12 +1 CWE-117
Priority LOW 16
A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00401 · Published 2020-03-16 · Partial fix CWE-732
THREATIST.IORead the docs