Skip to content
OpenAdvisories
Medium RHSA-2017:0448 1 CVE

Red Hat Security Advisory: ansible and openshift-ansible security and bug fix update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.2::el7 ansible 0:2.2.1.0-2.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-utils 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-ansible 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-ansible-docs 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-ansible-filter-plugins 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-ansible-lookup-plugins 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-ansible-playbooks 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-ansible-roles 0:3.2.53-1.git.0.2fefc17.el7
Red Hat · OpenShift 3 openshift:3.3::el7 ansible 0:2.2.1.0-2.el7
Red Hat · OpenShift 3 openshift:3.3::el7 atomic-openshift-utils 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible-callback-plugins 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible-docs 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible-filter-plugins 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible-lookup-plugins 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible-playbooks 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.3::el7 openshift-ansible-roles 0:3.3.67-1.git.0.7c5da0c.el7
Red Hat · OpenShift 3 openshift:3.4::el7 ansible 0:2.2.1.0-2.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-utils 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-callback-plugins 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-docs 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-filter-plugins 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-lookup-plugins 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-playbooks 0:3.4.67-1.git.0.14a0b4d.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-roles 0:3.4.67-1.git.0.14a0b4d.el7

Vulnerabilities 1

  • Medium 6.6
    CVE-2016-9587 Public exploit EPSS 17%

    Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html
  • article
    https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html
  • article
    https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1379189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388016
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1389263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393000
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404378
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1414276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1415067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1416926
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1416927
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1417680
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1417681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1417682
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419493
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419533
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419654
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420393
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420395
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421053
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421059
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1422361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1426705
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0448.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9587