tocsin

CVE-2020-1733

2 advisories.

PyPI/ansible CVE-2020-1733: medium 5, EPSS 0.40%

Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17
pip install ansible==2.8.11
pip install ansible==2.9.7

Affected

introducedfixedlast affected
02.7.17-
2.8.0a12.8.11-
2.9.0a12.9.7-

Fixed versions

2.7.172.8.112.9.7

Sources

CVE-2020-1733 · published · modified · JSON

PyPI/ansible CVE-2020-1733: unknown, EPSS 0.40%

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with b

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17
pip install ansible==2.8.8
pip install ansible==2.9.6

Affected

introducedfixedlast affected
02.7.17-
2.8.02.8.8-
2.9.02.9.6-

Fixed versions

2.7.172.8.82.9.6

Sources

CVE-2020-1733 · published · modified · JSON