Skip to content
OpenAdvisories
Medium RHSA-2017:0260 1 CVE

Red Hat Security Advisory: ansible and gdeploy security and bug fix update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3.1:server:el7 ansible 0:2.2.1.0-2.el7
Red Hat · Gluster Storage 3 storage:3.1:server:el7 gdeploy 0:2.0.1-8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.1:server:el7 python-passlib 0:1.6.5-1.el7
Red Hat · Gluster Storage 3 storage:3.1:server:el7 python2-passlib 0:1.6.5-1.el7

Vulnerabilities 1

  • Medium 6.6
    CVE-2016-9587 Public exploit EPSS 17%

    Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1335080
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1340038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1342519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1342713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1344603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1346244
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1348881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1349790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1360461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1360523
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1362570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1366203
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1366306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380091
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380098
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380315
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1387174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1387545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390871
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393204
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394636
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1396008
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404378
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0260.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9587