Red Hat Security Advisory

RHSA-2020:3601

Ansible security and bug fix update (2.9.13)

Released 2020-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2.9 for RHEL 7 Server ansible-2.9.13-1.el7ae, ansible-test-2.9.13-1.el7ae
Red Hat Ansible Engine 2.9 for RHEL 8 ansible-2.9.13-1.el8ae, ansible-test-2.9.13-1.el8ae

Fixes 1 record

TI-2020-11233 CVE-2020-14365 · GHSA-m429-fhmv-c6q2

Improper signature verification in ansible

LOW 31

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00233 Published 2020-09-23 Partial fix · 2.8.15, 2.9.13 CWE-347