FEDORA-2020-1b6ce91e37 — security update for ansible

stable

ansible-2.9.7-1.fc30

FEDORA-2020-1b6ce91e37 created by kevin 5 years ago for Fedora 30

Update to upstream bugfix and security update 2.9.7. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst for a detailed list of changes.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-1b6ce91e37

This update has been submitted for testing by kevin.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

ansible-2.9.7-1.fc30

BZ#1805318 CVE-2020-1740 ansible: secrets readable after ansible-vault edit [fedora-all]

BZ#1805333 CVE-2020-1735 ansible: path injection on dest parameter in fetch module [fedora-all]

BZ#1805341 CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive [fedora-all]

BZ#1808471 CVE-2020-1746 ansible: Information disclosure issue in ldap_attr and ldap_entry modules [fedora-all]

BZ#1811934 CVE-2020-1753 ansible: kubectl connection plugin leaks sensitive information [fedora-all]

BZ#1816310 CVE-2020-10684 ansible: code injection when using ansible_facts as a subkey [fedora-all]

BZ#1816313 CVE-2020-10685 ansible: modules which use files encrypted with vault are not properly cleaned up [fedora-all]

BZ#1817980 CVE-2020-10691 ansible: archive traversal vulnerability in ansible-galaxy collection install [fedora-all]

BZ#1825070 ansible-2.9.7 is available

ansible-2.9.7-1.fc30

Automated Test Results

ignored