Skip to content
OpenAdvisories
High RHSA-2020:0218 2 CVEs

Red Hat Security Advisory: Ansible security and bug fix update (2.9.4)

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2::el7 ansible 0:2.9.4-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2::el7 ansible-test 0:2.9.4-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2::el8 ansible 0:2.9.4-1.el8ae
Red Hat · Ansible Engine 2 ansible_engine:2::el8 ansible-test 0:2.9.4-1.el8ae

Vulnerabilities 2

  • High 7.3
    CVE-2019-14904

    OS Command Injection and Improper Input Validation in ansible

    A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take ad…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI
  • High 7.3
    CVE-2019-14905

    Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible

    A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craf…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1776943
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1776944
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0218.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-14904
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-14904
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-14904
  • report
    https://access.redhat.com/security/cve/CVE-2019-14905
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-14905
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-14905