prompt: We are currently solving the following issue within our repository. Here is the issue text:
  --- BEGIN ISSUE ---
  update Ansible due to CVE-2019-14864 
  ## Description
  
  [CVE-2019-14864](https://nvd.nist.gov/vuln/detail/CVE-2019-14864) is a vulnerability in Ansible's `no_log` flag for the splunk and sumologic plugins (sensitive data is incorrectly logged) but neither of which we're using. Regardless, we should update Ansible to a version that does not have this vulnerability in the next release.
  
  @emkll also pointed out to me that this is a [good time](https://docs.ansible.com/ansible/latest/reference_appendices/release_and_maintenance.html) to get onto the 2.8 series since the 2.7 series will become unmaintained when 2.10 is released (it's in development). 
  
  --- END ISSUE ---
  
  Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
  --- BEGIN FILES ---
  Path: `install_files/ansible-base/callback_plugins/ansible_version_check.py`
  Content:
  ```
  1 # -*- encoding:utf-8 -*-
  2 from __future__ import absolute_import, division, print_function, \
  3         unicode_literals
  4 
  5 import sys
  6 
  7 import ansible
  8 
  9 try:
  10     # Version 2.0+
  11     from ansible.plugins.callback import CallbackBase
  12 except ImportError:
  13     CallbackBase = object
  14 
  15 
  16 def print_red_bold(text):
  17     print('\x1b[31;1m' + text + '\x1b[0m')
  18 
  19 
  20 class CallbackModule(CallbackBase):
  21     def __init__(self):
  22         # Can't use `on_X` because this isn't forwards compatible
  23         # with Ansible 2.0+
  24         required_version = '2.7.13'  # Keep synchronized with requirements files
  25         if not ansible.__version__.startswith(required_version):
  26             print_red_bold(
  27                 "SecureDrop restriction: only Ansible {version}.*"
  28                 "is supported."
  29                 .format(version=required_version)
  30             )
  31             sys.exit(1)
  32
  ```
  --- END FILES ---
  
  Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.
  
  Here is an example:
  
  ```diff
  diff --git a/examples/server_async.py b/examples/server_async.py
  --- a/examples/server_async.py
  +++ b/examples/server_async.py
  @@ -313,4 +313,4 @@
   
   
   if __name__ == "__main__":
  -    asyncio.run(run_async_server("."), debug=True)
  +    asyncio.run(run_async_server(), debug=True)
  diff --git a/examples/server_sync.py b/examples/server_sync.py
  --- a/examples/server_sync.py
  +++ b/examples/server_sync.py
  @@ -313,5 +313,5 @@
   
   
   if __name__ == "__main__":
  -    server = run_sync_server(".")
  +    server = run_sync_server()
       server.shutdown()
  
  ```
  
golden_diff: diff --git a/install_files/ansible-base/callback_plugins/ansible_version_check.py b/install_files/ansible-base/callback_plugins/ansible_version_check.py
  --- a/install_files/ansible-base/callback_plugins/ansible_version_check.py
  +++ b/install_files/ansible-base/callback_plugins/ansible_version_check.py
  @@ -19,13 +19,18 @@
   
   class CallbackModule(CallbackBase):
       def __init__(self):
  -        # Can't use `on_X` because this isn't forwards compatible
  -        # with Ansible 2.0+
  -        required_version = '2.7.13'  # Keep synchronized with requirements files
  -        if not ansible.__version__.startswith(required_version):
  +        # The acceptable version range needs to be synchronized with
  +        # requirements files.
  +        viable_start = [2, 9, 7]
  +        viable_end = [2, 10, 0]
  +        ansible_version = [int(v) for v in ansible.__version__.split('.')]
  +        if not (viable_start <= ansible_version < viable_end):
               print_red_bold(
  -                "SecureDrop restriction: only Ansible {version}.*"
  -                "is supported."
  -                .format(version=required_version)
  +                "SecureDrop restriction: Ansible version must be at least {viable_start} "
  +                "and less than {viable_end}."
  +                .format(
  +                    viable_start='.'.join(str(v) for v in viable_start),
  +                    viable_end='.'.join(str(v) for v in viable_end),
  +                )
               )
               sys.exit(1)
  
verification_info: {"golden_diff": "diff --git a/install_files/ansible-base/callback_plugins/ansible_version_check.py b/install_files/ansible-base/callback_plugins/ansible_version_check.py\n--- a/install_files/ansible-base/callback_plugins/ansible_version_check.py\n+++ b/install_files/ansible-base/callback_plugins/ansible_version_check.py\n@@ -19,13 +19,18 @@\n \n class CallbackModule(CallbackBase):\n     def __init__(self):\n-        # Can't use `on_X` because this isn't forwards compatible\n-        # with Ansible 2.0+\n-        required_version = '2.7.13'  # Keep synchronized with requirements files\n-        if not ansible.__version__.startswith(required_version):\n+        # The acceptable version range needs to be synchronized with\n+        # requirements files.\n+        viable_start = [2, 9, 7]\n+        viable_end = [2, 10, 0]\n+        ansible_version = [int(v) for v in ansible.__version__.split('.')]\n+        if not (viable_start <= ansible_version < viable_end):\n             print_red_bold(\n-                \"SecureDrop restriction: only Ansible {version}.*\"\n-                \"is supported.\"\n-                .format(version=required_version)\n+                \"SecureDrop restriction: Ansible version must be at least {viable_start} \"\n+                \"and less than {viable_end}.\"\n+                .format(\n+                    viable_start='.'.join(str(v) for v in viable_start),\n+                    viable_end='.'.join(str(v) for v in viable_end),\n+                )\n             )\n             sys.exit(1)\n", "issue": "update Ansible due to CVE-2019-14864 \n## Description\r\n\r\n[CVE-2019-14864](https://nvd.nist.gov/vuln/detail/CVE-2019-14864) is a vulnerability in Ansible's `no_log` flag for the splunk and sumologic plugins (sensitive data is incorrectly logged) but neither of which we're using. Regardless, we should update Ansible to a version that does not have this vulnerability in the next release.\r\n\r\n@emkll also pointed out to me that this is a [good time](https://docs.ansible.com/ansible/latest/reference_appendices/release_and_maintenance.html) to get onto the 2.8 series since the 2.7 series will become unmaintained when 2.10 is released (it's in development). \n", "before_files": [{"content": "# -*- encoding:utf-8 -*-\nfrom __future__ import absolute_import, division, print_function, \\\n        unicode_literals\n\nimport sys\n\nimport ansible\n\ntry:\n    # Version 2.0+\n    from ansible.plugins.callback import CallbackBase\nexcept ImportError:\n    CallbackBase = object\n\n\ndef print_red_bold(text):\n    print('\\x1b[31;1m' + text + '\\x1b[0m')\n\n\nclass CallbackModule(CallbackBase):\n    def __init__(self):\n        # Can't use `on_X` because this isn't forwards compatible\n        # with Ansible 2.0+\n        required_version = '2.7.13'  # Keep synchronized with requirements files\n        if not ansible.__version__.startswith(required_version):\n            print_red_bold(\n                \"SecureDrop restriction: only Ansible {version}.*\"\n                \"is supported.\"\n                .format(version=required_version)\n            )\n            sys.exit(1)\n", "path": "install_files/ansible-base/callback_plugins/ansible_version_check.py"}], "after_files": [{"content": "# -*- encoding:utf-8 -*-\nfrom __future__ import absolute_import, division, print_function, \\\n        unicode_literals\n\nimport sys\n\nimport ansible\n\ntry:\n    # Version 2.0+\n    from ansible.plugins.callback import CallbackBase\nexcept ImportError:\n    CallbackBase = object\n\n\ndef print_red_bold(text):\n    print('\\x1b[31;1m' + text + '\\x1b[0m')\n\n\nclass CallbackModule(CallbackBase):\n    def __init__(self):\n        # The acceptable version range needs to be synchronized with\n        # requirements files.\n        viable_start = [2, 9, 7]\n        viable_end = [2, 10, 0]\n        ansible_version = [int(v) for v in ansible.__version__.split('.')]\n        if not (viable_start <= ansible_version < viable_end):\n            print_red_bold(\n                \"SecureDrop restriction: Ansible version must be at least {viable_start} \"\n                \"and less than {viable_end}.\"\n                .format(\n                    viable_start='.'.join(str(v) for v in viable_start),\n                    viable_end='.'.join(str(v) for v in viable_end),\n                )\n            )\n            sys.exit(1)\n", "path": "install_files/ansible-base/callback_plugins/ansible_version_check.py"}]}