CVE-2020-10744

2 advisories.

PyPI/ansible CVE-2020-10744: medium 5

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

Action: Upgrade ansible to 2.9.12 or later.

pip install ansible==2.10.0rc1

pip install ansible==2.9.12

Affected

introduced	fixed	last affected
2.10.0a1	2.10.0rc1	-
0	2.9.12	-

Fixed versions

2.10.0rc1

2.9.12

Sources

CVE-2020-10744 · published 2022-02-09T21:59:42Z · modified 2024-11-20T05:38:46.415762Z · JSON

PyPI/ansible CVE-2020-10744: unknown

An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the

Action: Upgrade ansible to 2.8.0a1 or later.

pip install ansible==2.8.0a1

pip install ansible==2.8.13

pip install ansible==2.9.10

Affected

introduced	fixed	last affected
2.7.0	2.8.0a1	-
2.8.0	2.8.13	-
2.9.0	2.9.10	-

Fixed versions

2.8.0a1

2.8.13

2.9.10

Sources

CVE-2020-10744 · published 2020-05-15T14:15:00Z · modified 2023-11-08T04:02:00.423763Z · JSON