tocsin

PyPI/ansible CVE-2020-10744: unknown, EPSS 0.26%

An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the

Action: Upgrade ansible to 2.8.0a1 or later.

pip install ansible==2.8.0a1
pip install ansible==2.8.13
pip install ansible==2.9.10

Affected

introducedfixedlast affected
2.7.02.8.0a1-
2.8.02.8.13-
2.9.02.9.10-

Fixed versions

2.8.0a12.8.132.9.10

Sources

CVE-2020-10744 · published · modified · JSON