Fedora 25: Ansible 2.2.1 Critical Update for Multiple Issues
fedora
January 25, 2017
Update to ansible 2.2.1
Summary
Ansible is a radically simple model-driven configuration management,
multi-node deployment, and remote task execution system. Ansible works
over SSH and does not require any software or daemons to be installed
on remote nodes. Extension modules can be written in any language and
are transferred to managed machines automatically.
Update Information:
Update to ansible 2.2.1. Fixes several CVEs as well as a number of other bugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md for full changes.
Topics Covered
Change Log
References
[ 1 ] Bug #1412357 - CVE-2016-9587 Ansible: Compromised remote hosts can lead to running commands on the Ansible controller [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1412357
[ 2 ] Bug #1396176 - CVE-2016-8647 Ansible: in some circumstances the mysql_user module may fail to correctly change a password [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1396176
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ansible' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: ansible
Product: Fedora 25
Version: 2.2.1.0
Release: 1.fc25
Summary: SSH-based configuration management, deployment, and task execution system
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!