TI-2016-07090 CVE-2016-8628 · GHSA-jg4f-jqm5-4mgq
Command injection in Red Hat Ansible
Priority MEDIUM 45
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller.
RHSA-2016:2778
atomic-openshift-utils security and bug fix update
Released 2016-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.2 ansible-2.2.0.0-1.el7, atomic-openshift-utils-3.2.42-1.git.0.6b09be9.el7, openshift-ansible-3.2.42-1.git.0.6b09be9.el7 +5
- Red Hat OpenShift Container Platform 3.3 ansible-2.2.0.0-1.el7, atomic-openshift-utils-3.3.50-1.git.0.5bdbeaa.el7, openshift-ansible-3.3.50-1.git.0.5bdbeaa.el7 +6