PyPI/ansible CVE-2020-1746: unknown, EPSS 0.39%
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5
Action: Upgrade ansible to 2.7.17 or later.
pip install ansible==2.7.17pip install ansible==2.8.11pip install ansible==2.9.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.17 | - |
| 2.8.0 | 2.8.11 | - |
| 2.9.0 | 2.9.7 | - |
Fixed versions
| 2.7.17 | 2.8.11 | 2.9.7 |
Sources
- osv: PYSEC-2020-13
- https://github.com/ansible/ansible/pull/67866
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1746
- https://github.com/advisories/GHSA-j2h6-73x8-22c4
CVE-2020-1746 · published · modified · JSON