VDB
Sign up
—

PYSEC-2020-7

Quick fix

PYSEC-2020-7 — ansible: upgrade to the fixed version with the command below.

pip install --upgrade 'ansible>=2.7.17'

Details

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/ansible
Introduced in: 0Fixed in: 2.7.17
Fixpip install --upgrade 'ansible>=2.7.17'

References