We are currently solving the following issue within our repository. Here is the issue text:
--- BEGIN ISSUE ---
update Ansible due to CVE-2019-14864 
## Description

[CVE-2019-14864](https://nvd.nist.gov/vuln/detail/CVE-2019-14864) is a vulnerability in Ansible's `no_log` flag for the splunk and sumologic plugins (sensitive data is incorrectly logged) but neither of which we're using. Regardless, we should update Ansible to a version that does not have this vulnerability in the next release.

@emkll also pointed out to me that this is a [good time](https://docs.ansible.com/ansible/latest/reference_appendices/release_and_maintenance.html) to get onto the 2.8 series since the 2.7 series will become unmaintained when 2.10 is released (it's in development). 

--- END ISSUE ---

Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
--- BEGIN FILES ---
Path: `install_files/ansible-base/callback_plugins/ansible_version_check.py`
Content:
```
1 # -*- encoding:utf-8 -*-
2 from __future__ import absolute_import, division, print_function, \
3         unicode_literals
4 
5 import sys
6 
7 import ansible
8 
9 try:
10     # Version 2.0+
11     from ansible.plugins.callback import CallbackBase
12 except ImportError:
13     CallbackBase = object
14 
15 
16 def print_red_bold(text):
17     print('\x1b[31;1m' + text + '\x1b[0m')
18 
19 
20 class CallbackModule(CallbackBase):
21     def __init__(self):
22         # Can't use `on_X` because this isn't forwards compatible
23         # with Ansible 2.0+
24         required_version = '2.7.13'  # Keep synchronized with requirements files
25         if not ansible.__version__.startswith(required_version):
26             print_red_bold(
27                 "SecureDrop restriction: only Ansible {version}.*"
28                 "is supported."
29                 .format(version=required_version)
30             )
31             sys.exit(1)
32
```
--- END FILES ---

Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.

Here is an example:

```diff
diff --git a/examples/server_async.py b/examples/server_async.py
--- a/examples/server_async.py
+++ b/examples/server_async.py
@@ -313,4 +313,4 @@
 
 
 if __name__ == "__main__":
-    asyncio.run(run_async_server("."), debug=True)
+    asyncio.run(run_async_server(), debug=True)
diff --git a/examples/server_sync.py b/examples/server_sync.py
--- a/examples/server_sync.py
+++ b/examples/server_sync.py
@@ -313,5 +313,5 @@
 
 
 if __name__ == "__main__":
-    server = run_sync_server(".")
+    server = run_sync_server()
     server.shutdown()

```

diff --git a/install_files/ansible-base/callback_plugins/ansible_version_check.py b/install_files/ansible-base/callback_plugins/ansible_version_check.py
--- a/install_files/ansible-base/callback_plugins/ansible_version_check.py
+++ b/install_files/ansible-base/callback_plugins/ansible_version_check.py
@@ -19,13 +19,18 @@
 
 class CallbackModule(CallbackBase):
     def __init__(self):
-        # Can't use `on_X` because this isn't forwards compatible
-        # with Ansible 2.0+
-        required_version = '2.7.13'  # Keep synchronized with requirements files
-        if not ansible.__version__.startswith(required_version):
+        # The acceptable version range needs to be synchronized with
+        # requirements files.
+        viable_start = [2, 9, 7]
+        viable_end = [2, 10, 0]
+        ansible_version = [int(v) for v in ansible.__version__.split('.')]
+        if not (viable_start <= ansible_version < viable_end):
             print_red_bold(
-                "SecureDrop restriction: only Ansible {version}.*"
-                "is supported."
-                .format(version=required_version)
+                "SecureDrop restriction: Ansible version must be at least {viable_start} "
+                "and less than {viable_end}."
+                .format(
+                    viable_start='.'.join(str(v) for v in viable_start),
+                    viable_end='.'.join(str(v) for v in viable_end),
+                )
             )
             sys.exit(1)

{"golden_diff": "diff --git a/install_files/ansible-base/callback_plugins/ansible_version_check.py b/install_files/ansible-base/callback_plugins/ansible_version_check.py\n--- a/install_files/ansible-base/callback_plugins/ansible_version_check.py\n+++ b/install_files/ansible-base/callback_plugins/ansible_version_check.py\n@@ -19,13 +19,18 @@\n \n class CallbackModule(CallbackBase):\n     def __init__(self):\n-        # Can't use `on_X` because this isn't forwards compatible\n-        # with Ansible 2.0+\n-        required_version = '2.7.13'  # Keep synchronized with requirements files\n-        if not ansible.__version__.startswith(required_version):\n+        # The acceptable version range needs to be synchronized with\n+        # requirements files.\n+        viable_start = [2, 9, 7]\n+        viable_end = [2, 10, 0]\n+        ansible_version = [int(v) for v in ansible.__version__.split('.')]\n+        if not (viable_start <= ansible_version < viable_end):\n             print_red_bold(\n-                \"SecureDrop restriction: only Ansible {version}.*\"\n-                \"is supported.\"\n-                .format(version=required_version)\n+                \"SecureDrop restriction: Ansible version must be at least {viable_start} \"\n+                \"and less than {viable_end}.\"\n+                .format(\n+                    viable_start='.'.join(str(v) for v in viable_start),\n+                    viable_end='.'.join(str(v) for v in viable_end),\n+                )\n             )\n             sys.exit(1)\n", "issue": "update Ansible due to CVE-2019-14864 \n## Description\r\n\r\n[CVE-2019-14864](https://nvd.nist.gov/vuln/detail/CVE-2019-14864) is a vulnerability in Ansible's `no_log` flag for the splunk and sumologic plugins (sensitive data is incorrectly logged) but neither of which we're using. Regardless, we should update Ansible to a version that does not have this vulnerability in the next release.\r\n\r\n@emkll also pointed out to me that this is a [good time](https://docs.ansible.com/ansible/latest/reference_appendices/release_and_maintenance.html) to get onto the 2.8 series since the 2.7 series will become unmaintained when 2.10 is released (it's in development). \n", "before_files": [{"content": "# -*- encoding:utf-8 -*-\nfrom __future__ import absolute_import, division, print_function, \\\n        unicode_literals\n\nimport sys\n\nimport ansible\n\ntry:\n    # Version 2.0+\n    from ansible.plugins.callback import CallbackBase\nexcept ImportError:\n    CallbackBase = object\n\n\ndef print_red_bold(text):\n    print('\\x1b[31;1m' + text + '\\x1b[0m')\n\n\nclass CallbackModule(CallbackBase):\n    def __init__(self):\n        # Can't use `on_X` because this isn't forwards compatible\n        # with Ansible 2.0+\n        required_version = '2.7.13'  # Keep synchronized with requirements files\n        if not ansible.__version__.startswith(required_version):\n            print_red_bold(\n                \"SecureDrop restriction: only Ansible {version}.*\"\n                \"is supported.\"\n                .format(version=required_version)\n            )\n            sys.exit(1)\n", "path": "install_files/ansible-base/callback_plugins/ansible_version_check.py"}], "after_files": [{"content": "# -*- encoding:utf-8 -*-\nfrom __future__ import absolute_import, division, print_function, \\\n        unicode_literals\n\nimport sys\n\nimport ansible\n\ntry:\n    # Version 2.0+\n    from ansible.plugins.callback import CallbackBase\nexcept ImportError:\n    CallbackBase = object\n\n\ndef print_red_bold(text):\n    print('\\x1b[31;1m' + text + '\\x1b[0m')\n\n\nclass CallbackModule(CallbackBase):\n    def __init__(self):\n        # The acceptable version range needs to be synchronized with\n        # requirements files.\n        viable_start = [2, 9, 7]\n        viable_end = [2, 10, 0]\n        ansible_version = [int(v) for v in ansible.__version__.split('.')]\n        if not (viable_start <= ansible_version < viable_end):\n            print_red_bold(\n                \"SecureDrop restriction: Ansible version must be at least {viable_start} \"\n                \"and less than {viable_end}.\"\n                .format(\n                    viable_start='.'.join(str(v) for v in viable_start),\n                    viable_end='.'.join(str(v) for v in viable_end),\n                )\n            )\n            sys.exit(1)\n", "path": "install_files/ansible-base/callback_plugins/ansible_version_check.py"}]}