Skip to content
OpenAdvisories
Medium RHSA-2017:0515 1 CVE

Red Hat Security Advisory: ansible and ceph-ansible security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhscon 2 rhscon:2::el7 ansible 0:2.2.1.0-1.el7
Red Hat · Rhscon 2 rhscon:2::el7 ceph-ansible 0:2.1.9-1.el7scon
Red Hat · Rhscon 2 rhscon:2::el7 ceph-installer 0:1.2.2-1.el7scon
Red Hat · Rhscon 2 rhscon:2::el7 python-passlib 0:1.6.5-1.1.el7

Vulnerabilities 1

  • Medium 6.6
    CVE-2016-9587 Public exploit EPSS 17%

    Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en/red-hat-storage-console/2.0/paged/release-notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312443
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1339576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1364167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1366808
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1382878
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1384622
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400967
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404378
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404515
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405985
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1406556
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1412867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1413985
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1414647
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1416010
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1418980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419814
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1422134
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0515.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9587