Moderate: Red Hat Security Advisory: security update - Red Hat Ansible Tower 3.7.1-1 - RHEL7 Container

Red Hat Ansible Tower 3.7.1-1 - RHEL7 Container Updated rsyslog integration to not write world-readable configuration files CVE-2020-10782 Updated the included foreman/satellite inventory plugin to add the hostfilters and wantansiblesshhost options Updated Foreman/Satellite inventory to properly...

CVE-2020-10782

CVE-2020-10782 affects Ansible 3.7.0 by exposing sensitive information from the rsyslog configuration file due to world-readable permissions. The issue is mitigated by upgrading to Ansible 3.7.1, as reflected in both NVD and Red Hat advisories. Red Hat RHSA-2020:2617 confirms a Tower 3.7.1-1 upda...