Red Hat Security Advisory

RHSA-2017:0260

ansible and gdeploy security and bug fix update

Released 2017-02-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Gluster Storage Server 3.1 on RHEL-7 ansible-2.2.1.0-2.el7, gdeploy-2.0.1-8.el7rhgs, python-passlib-1.6.5-1.el7 +1

TI-2016-07808 CVE-2016-9587 · GHSA-m956-frf4-m2wr

MEDIUM 52

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.17006 Published 2018-04-24 Partial fix · 2.1.4.0, 2.2.1.0 CWE-20