Skip to content
OpenAdvisories
Medium RHSA-2019:1706 1 CVE

Red Hat Security Advisory: ansible security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2::el7 ansible 0:2.8.2-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2::el8 ansible 0:2.8.2-1.el8ae

Vulnerabilities 1

  • Medium 4.6
    CVE-2019-10156

    Exposure of Sensitive Information to an Unauthorized Actor in ansible

    A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitutio…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://github.com/ansible/ansible/blob/v2.8.2/changelogs/CHANGELOG-v2.8.rst
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1717311
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1706.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10156
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10156