Skip to content
OpenAdvisories
Medium RHSA-2019:2543 2 CVEs

Red Hat Security Advisory: Ansible security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2::el7 ansible 0:2.8.4-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2::el8 ansible 0:2.8.4-1.el8ae

Vulnerabilities 2

  • Medium 6.4
    CVE-2019-10206

    Ansible password prompts could expose passwords

    ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI
  • Medium 5.7
    CVE-2019-10217

    Exposure of Sensitive Information to an Unauthorized Actor in ansible

    A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP modules are not set properly. service_account_contents() which is common class for all gcp modules is not setti…

    Red Hat Ansible ansible ansible Debian Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://github.com/ansible/ansible/blob/v2.8.4/changelogs/CHANGELOG-v2.8.rst
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732623
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1733509
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2543.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10206
  • article
    https://github.com/ansible/ansible/pull/59246
  • report
    https://access.redhat.com/security/cve/CVE-2019-10217
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10217
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10217