Skip to content
OpenAdvisories
Medium RHSA-2019:0433 1 CVE

Red Hat Security Advisory: ansible security and bug fix update

Published Sep 13, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.6::el7 ansible 0:2.6.14-1.el7ae

Vulnerabilities 1

  • Medium 4.2
    CVE-2019-3828

    Ansible Path Traversal vulnerability

    Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1676689
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0433.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-3828
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3828
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3828
  • article
    https://github.com/ansible/ansible/pull/52133