tocsin

CVE-2020-1737

2 advisories.

PyPI/ansible CVE-2020-1737: high 7.8

Path Traversal in Ansible

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.8.9
pip install ansible==2.9.6
pip install ansible==2.7.17

Affected

introducedfixedlast affected
2.8.0a12.8.9-
2.9.0a12.9.6-
02.7.17-

Fixed versions

2.8.92.9.62.7.17

Sources

CVE-2020-1737 · published · modified · JSON

PyPI/ansible CVE-2020-1737: unknown

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17
pip install ansible==2.8.9
pip install ansible==2.9.6

Affected

introducedfixedlast affected
02.7.17-
2.8.02.8.9-
2.9.02.9.6-

Fixed versions

2.7.172.8.92.9.6

Sources

CVE-2020-1737 · published · modified · JSON