Bug 27724

Summary: ansible new security issue CVE-2020-10744
Product: Mageia Reporter: Zombie Ryushu <zombie_ryushu>
Component: SecurityAssignee: Bruno Cornec <bruno>
Status: RESOLVED DUPLICATE QA Contact: Sec team <security>
Severity: normal    
Priority: Normal    
Version: 7   
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: https://repology.org/project/ansible/cves?version=2.7.18
Whiteboard:
Source RPM: ansible-2.7.18-1.mga7.src.rpm CVE: CVE-2020-10744
Status comment:

Description Zombie Ryushu 2020-12-04 00:37:34 CET 
CVE-2020-10744 2020-05-15T14:15Z 2020-05-29T14:10Z 	
redhat
ansible
	[2.7.0, 2.7.18] [2.8.0, 2.8.12] [2.9.0, 2.9.9]
CVE-2020-25635 2020-10-05T14:15Z 2020-10-08T18:40Z 	
redhat
ansible
	2.10.1
CVE-2020-25636 2020-10-05T13:15Z 2020-10-09T23:24Z
Zombie Ryushu 2020-12-04 00:37:49 CET

CVE: (none) => CVE-2020-10744

Comment 1 David Walser 2020-12-04 00:53:39 CET 
Fixed in 2.7.19 (not sure if it's released yet).

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10744
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744
https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst

*** This bug has been marked as a duplicate of bug 26349 ***

Resolution: (none) => DUPLICATE
Summary: [Update Request] ansible CVE-2020-10744 => ansible new security issue CVE-2020-10744
Assignee: bugsquad => bruno
Status: NEW => RESOLVED
Source RPM: ansible => ansible-2.7.18-1.mga7.src.rpm