RHSA-2021:3872: Important: Ansible security and bug fix update (2.9.27)
Ansible is a simple model-driven configuration management, multi-nodedeployment, and remote-task execution system. Ansible works over SSH anddoes not require any software or daemons to be installed on remote nodes.Extension modules can be written in any language and are transferred tomanaged machines automatically.The following packages have been upgraded to a newer upstream version:ansible (2.9.27)Bug Fix(es): CVE-2021-3620 Ansible: ansible-connection module discloses sensitive info in traceback error messageSee:https://github.com/ansible/ansible/blob/v2.9.27/changelogs/CHANGELOG-v2.9.rst for details on bug fixes in this release.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:3872?
The severity of RHSA-2021:3872 is categorized as important.
How do I fix RHSA-2021:3872?
To fix RHSA-2021:3872, update to the version 2.9.27-1.el8ae or 2.9.27-1.el7ae of Ansible.
Which versions of Ansible are affected by RHSA-2021:3872?
Ansible versions prior to 2.9.27-1.el8ae on EL8 and EL7 are affected by RHSA-2021:3872.
Is RHSA-2021:3872 related to Ansible's security features?
Yes, RHSA-2021:3872 involves vulnerabilities that could impact the security features of Ansible.
What is the purpose of the update in RHSA-2021:3872?
The update in RHSA-2021:3872 aims to address vulnerabilities and improve the security of Ansible.