RHSA-2021:0780: Important: Red Hat Ansible Tower 3.8.2-1 - Container security and bug fix update

First published: Tue Mar 09 2021(Updated: )

Security Fix(es):<br><li> Addressed a security issue which can allow a malicious playbook author to elevate to the awx user from outside the isolated environment: CVE-2021-20253</li> <li> Upgraded to a more recent version of Django to address CVE-2021-3281.</li> <li> Upgraded to a more recent version of autobahn to address CVE-2020-35678.</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> Upgraded to the latest oVirt inventory plugin to resolve a number of inventory syncing issues that can occur on RHEL7.</li> <li> Upgraded to the latest theforeman.foreman inventory plugin to resolve a few bugs and performance regressions.</li> <li> Fixed several issues related to how Tower rotates its log files.</li> <li> Fixed a bug which can prevent Tower from installing on RHEL8 with certain non-en_US.UTF-8 locales.</li> <li> Fixed a bug which can cause unanticipated delays in certain playbook output.</li> <li> Fixed a bug which can cause job runs to fail for playbooks that print certain types of raw binary data.</li> <li> Fixed a bug which can cause unnecessary records in the Activity Stream when Automation Analytics data is collected.</li> <li> Fixed a bug which can cause Tower PostgreSQL backups to fail when a non-default PostgreSQL username is specified.</li> <li> Fixed a bug which can intermittently cause access to encrypted Tower settings to fail, resulting in failed job launches.</li> <li> Fixed a bug which can cause certain long-running jobs running on isolated nodes to unexpectedly fail.</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-errata
• anchor-id/RHSA-2021:0780