Is Ansible 2.9.27 patched?
Current stable (14.0.0): 100/100
2.9.27 has 3 open critical-or-high vulnerabilities. Run 5.1.0 or later to clear them. See what 5.1.0 fixes →
Summary iPlain-English security status for Ansible 2.9.27, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Ansible 2.9.27 is part of the 2.9 release line. 11 known vulnerabilities affect it. The minimum safe version is 5.1.0 — upgrade to it or later to clear the open critical/high issues. The 2.9 line reached end-of-life on 2022-05-23, so it no longer receives security patches. The latest supported Ansible release is 14.0.0.
Known issues affecting 2.9.27
Exploited first, then by exploitation probability.
CVE-2022-3697 HIGH EPSS 1% → fixed in 5.1.0 CVE-2023-5764 HIGH EPSS 1% → fixed in 2.15.7 CVE-2020-1735 MEDIUM EPSS 0% → fixed in 2.9.7 CVE-2020-1736 LOW EPSS 0% → fixed in 2.9.13 CVE-2020-1733 MEDIUM EPSS 0% → fixed in 2.8.8 CVE-2020-1738 LOW EPSS 0% → see advisory CVE-2020-1740 LOW EPSS 0% → fixed in 2.9.7 CVE-2020-1739 LOW EPSS 0% → see advisory CVE-2020-10684 HIGH EPSS 0% → fixed in 2.9.6 CVE-2021-3447 MEDIUM EPSS 0% → fixed in 3.8.2 CVE-2024-0690 MEDIUM EPSS 0% → fixed in 2.16.3Other Ansible versions
Check another release line of Ansible.
Frequently asked
Is Ansible 2.9.27 patched?
Ansible 2.9.27 is end-of-life and no longer receives security patches. Move to 14.0.0.
What version should I upgrade Ansible 2.9.27 to?
Upgrade Ansible 2.9.27 to at least 5.1.0 to clear its 3 open critical-or-high vulnerabilities.
When does Ansible 2.9 reach end-of-life?
Ansible 2.9 reached end-of-life on 2022-05-23 and no longer receives security patches.
What is the latest version of Ansible?
The latest supported Ansible release is 14.0.0.
Is Ansible 2.9.27 still receiving security updates?
No — Ansible 2.9.27 is on the 2.9 line, which reached end-of-life on 2022-05-23 and no longer receives security updates. Upgrade to 14.0.0 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Red Hat's official advisory before you patch or upgrade — Ansible official site ↗