RHSA-2020:1541: Important: Ansible security and bug fix update (2.9.7)

Ansible is a simple model-driven configuration management, multi-nodedeployment, and remote-task execution system. Ansible works over SSH anddoes not require any software or daemons to be installed on remote nodes.Extension modules can be written in any language and are transferred tomanaged machines automatically.The following packages have been upgraded to a newer upstream version:ansible (2.9.7)Bug Fix(es): CVE-2020-10684 Ansible: code injection when using ansiblefacts as a subkey CVE-2020-10685 Ansible: modules which use files encrypted with vault are not properly cleaned up CVE-2020-10691 Ansible: archive traversal vulnerability in ansible-galaxy collection install CVE-2020-1733 ansible: insecure temporary directory when running becomeuser from become directive CVE-2020-1735 ansible: path injection on dest parameter in fetch module CVE-2020-1737 ansible: Extract-Zip function in winunzip module does not check extracted path CVE-2020-1739 ansible: svn module leaks password when specified as a parameter CVE-2020-1740 ansible: secrets readable after ansible-vault edit CVE-2020-1746 ansible: Information disclosure issue in ldapattr and ldapentry modules CVE-2020-1753 Ansible: kubectl connection plugin leaks sensitive informationSee:https://github.com/ansible/ansible/blob/v2.9.7/changelogs/CHANGELOG-v2.9.rst for details on bug fixes in this release.