Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Red Hat Ansible Tower 3.3.1-2 Critical Update: RHSA-2018-3505-01

red hat
Calendar Grey November 6, 2018
Dist Redhat Esm H88
Red Hat Ansible Tower 3.3.1-2 vital update boosts security and task oversight with several key corrections
Security Advisory 2

Solution

The Ansible Tower Upgrade and Migration Guide is available at: https://legacy-controller-docs.ansible.com/ansible-tower/ index.html

Summary

Red Hat Ansible Tower 3.3.1 is now available and contains the following bug fixes:
- - Fixed event callback error when in-line vaulted variables are used with ``include_vars`` - - Fixed HSTS and X-Frame-Options to properly be set in nginx configuration - - Fixed isolated node setup to no longer fail when ``ansible_host`` is used - - Fixed selection of custom virtual environments in job template creation - - Fixed websockets for job details to properly work - - Fixed the ``/api/v2/authtoken`` compatibility shim - - Fixed page size selection on the jobs screen - - Fixed instances in an instance group to properly be disabled in the user interface - - Fixed the job template selection in workflow creation to properly render - - Fixed ``member_attr`` to properly set on some LDAP configurations during upgrade, preventing login - - Fixed ``PosixUIDGroupType`` LDAP configurations - - Improved the RAM requirement in the installer preflight check - - Updated Tower to properly report an error when relaunch was used on a set of failed hosts that is too large - - Updated sosreport configuration to gather more python environment, nginx, and supervisor configuration - - Fixed display of extra_vars for scheduled jobs

Topics%20covered

Topics Covered

security advisory security issue Red Hat critical update software fix Ansible Tower container image

References

https://access.redhat.com/security/cve/CVE-2015-9262 https://access.redhat.com/security/cve/CVE-2016-9396 https://access.redhat.com/security/cve/CVE-2017-3735 https://access.redhat.com/security/cve/CVE-2017-18267 https://access.redhat.com/security/cve/CVE-2017-1000050 https://access.redhat.com/security/cve/CVE-2018-0495 https://access.redhat.com/security/cve/CVE-2018-0732 https://access.redhat.com/security/cve/CVE-2018-0737 https://access.redhat.com/security/cve/CVE-2018-0739 https://access.redhat.com/security/cve/CVE-2018-1060 https://access.redhat.com/security/cve/CVE-2018-1061 https://access.redhat.com/security/cve/CVE-2018-10733 https://access.redhat.com/security/cve/CVE-2018-10767 https://access.redhat.com/security/cve/CVE-2018-10768 https://access.redhat.com/security/cve/CVE-2018-10844 https://access.redhat.com/security/cve/CVE-2018-10845 https://access.redhat.com/security/cve/CVE-2018-10846 https://access.redhat.com/security/cve/CVE-2018-12384 https://access.redhat.com/security/cve/CVE-2018-12910 https://access.redhat.com/security/cve/CVE-2018-13988 https://access.redhat.com/security/cve/CVE-2018-14679 https://access.redhat.com/security/cve/CVE-2018-14680 https://access.redhat.com/security/cve/CVE-2018-14681 Read the Full Advisory

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2018:3505-01
Product: Red Hat Ansible Tower
Advisory URL: Issue date: 2018-11-06

Topic

Security Advisory

Topics%20covered

Topics Covered

security advisory security issue Red Hat critical update software fix Ansible Tower container image

Relevant Releases Architectures

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.