Skip to content
OpenAdvisories
Medium RHSA-2019:3928 1 CVE

Red Hat Security Advisory: ansible security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2::el7 ansible 0:2.9.1-1.el7
Red Hat · Ansible Engine 2 ansible_engine:2::el7 ansible-test 0:2.9.1-1.el7
Red Hat · Ansible Engine 2 ansible_engine:2::el8 ansible 0:2.9.1-1.el8
Red Hat · Ansible Engine 2 ansible_engine:2::el8 ansible-test 0:2.9.1-1.el8

Vulnerabilities 1

  • Medium 5.7
    CVE-2019-14864

    Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible

    Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would disclos…

    Red Hat Ansible ansible ansible Debian Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1764148
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3928.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-14864
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-14864
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-14864