RHBA-2021:3472 - Bug Fix Advisory

Topic

Red Hat Ansible Tower 3.8.4-1 - Container

Description

• Running inventories of ~60k hosts no longer takes a very long time for events to show up
• Removed ``artifact_data`` from data sent to analytics as part of ``playbook_on_stats``, since ``artifact_data`` can contain PII or sensitive data
• Regular users are no longer experiencing longer load times than a superuser when clicking to edit a job template
• Updated password validation support to allow modifying password complexity requirements using some Django configurations
• Fixed AWS inventory tags filtering to support the ``OR`` condition
• Updated Ansible version to 2.9.25
• Updated Django version to 2.2.20
• Fixed Tower's NGINX Instance vulnerability (CVE-2021-23017)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Ansible Automation Platform Text-Only Advisories for RHEL 7 x86_64

Fixes

CVEs

• CVE-2021-23017
• CVE-2021-31535
• CVE-2021-32027
• CVE-2021-32028

References

(none)