Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

RedHat: RHSA-2020-4136-01 Moderate: Ansible Tower 3.7.3 Security Fix

red hat
Calendar Grey September 30, 2020
Dist Redhat Esm H88
Version 3.7.3-1 of Red Hat Ansible Tower outlines updates focused on security, enhancements in Git-Python functionality, and boosts in overall performance.
Red Hat Ansible Tower 3.7.3-1 - RHEL7 Container 2

Solution

For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://legacy-controller-docs.ansible.com/ansible-tower/ index.html

Summary

* Updated to the latest version of the git-python library to no longer cause certain jobs to fail * Updated to the latest version of the ovirt.ovirt collection to no longer cause connections to hang when syncing inventory from oVirt/RHV * Added a number of optimizations to Ansible Tower's callback receiver to improve the speed of stdout processing for simultaneous playbooks runs * Added an optional setting to disable the auto-creation of organizations and teams on successful SAML login * Fixed an XSS vulnerability (CVE-2020-25626) * Fixed a slow memory leak in the Daphne process * Fixed Automation Analytics data gathering to no longer fail for customerswith large datasets * Fixed scheduled jobs that run every X minute(s) or hour(s) to no longer fail to run at the proper time * Fixed delays in Ansible Tower's task manager when large numbers of simultaneous jobs are scheduled * Fixed the performance for playbooks that store large amounts of data using the set_stats module * Fixed the awx-manage remove_from_queue tool when used with isolated nodes * Fixed an issue that prevented jobs from being properly marked as canceled when Tower is backed up and then restored to another environment

References

https://access.redhat.com/security/cve/CVE-2020-14365 https://access.redhat.com/security/cve/CVE-2020-25626 https://access.redhat.com/security/updates/classification/#moderate

Package List


Advisory ID: RHSA-2020:4136-01
Product: Red Hat Ansible Tower
Issue date: 2020-09-30

Topic

Red Hat Ansible Tower 3.7.3-1 - RHEL7 Container

Relevant Releases Architectures

Bugs Fixed

1878635 - CVE-2020-25626 django-rest-framework: XSS Vulnerability in API viewer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here