Skip to content
OpenAdvisories
Medium RHBA-2020:0784 1 CVE

Red Hat Bug Fix Advisory: Ansible 2.9.6 release for Ansible Engine 2.9

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.9::el7 ansible 0:2.9.6-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2.9::el7 ansible-test 0:2.9.6-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2.9::el8 ansible 0:2.9.6-1.el8ae
Red Hat · Ansible Engine 2 ansible_engine:2.9::el8 ansible-test 0:2.9.6-1.el8ae

Vulnerabilities 1

  • Medium 5.0
    CVE-2020-10729

    Insufficiently random values in Ansible

    A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulne…

    ansible ansible ansible Debian Ubuntu PyPI

References

  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0784.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1831089
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10729
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10729
  • article
    https://github.com/ansible/ansible/issues/34144