Fedora 25: ansible Security Update
Summary
Ansible is a radically simple model-driven configuration management,
multi-node deployment, and remote task execution system. Ansible works
over SSH and does not require any software or daemons to be installed
on remote nodes. Extension modules can be written in any language and
are transferred to managed machines automatically.
Update Information:
Update to ansible 2.2.1. Fixes several CVEs as well as a number of other bugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md for full changes.
Change Log
References
[ 1 ] Bug #1412357 - CVE-2016-9587 Ansible: Compromised remote hosts can lead to running commands on the Ansible controller [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1412357 [ 2 ] Bug #1396176 - CVE-2016-8647 Ansible: in some circumstances the mysql_user module may fail to correctly change a password [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1396176
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ansible' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html