RHBA-2020:0784

csafUSredhat_csaf

Red Hat Bug Fix Advisory: Ansible 2.9.6 release for Ansible Engine 2.9

view advisory published 2020-03-11

Ansible 2.9.6 release for Ansible Engine 2.9

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-10729USmedium5.5OT elevated—
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for t…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • Fixedansible-0:2.9.6-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.9 for RHEL 7 Server

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2020:0784
  • Fixedansible-0:2.9.6-1.el7ae.src as a component of Red Hat Ansible Engine 2.9 for RHEL 7 Server

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2020:0784
  • Fixedansible-0:2.9.6-1.el8ae.noarch as a component of Red Hat Ansible Engine 2.9 for RHEL 8

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2020:0784
  • Fixedansible-0:2.9.6-1.el8ae.src as a component of Red Hat Ansible Engine 2.9 for RHEL 8

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2020:0784
  • Fixedansible-test-0:2.9.6-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.9 for RHEL 7 Server

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2020:0784
  • Fixedansible-test-0:2.9.6-1.el8ae.noarch as a component of Red Hat Ansible Engine 2.9 for RHEL 8

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2020:0784
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan