VDB
Sign up
—

PYSEC-2017-2

Quick fix

PYSEC-2017-2 — ansible: upgrade to the fixed version with the command below.

pip install --upgrade 'ansible>=8ed6350e65c82292a631f08845dfaacffe7f07f5'

Details

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/ansible
Introduced in: 0Fixed in: 8ed6350e65c82292a631f08845dfaacffe7f07f5
Fixpip install --upgrade 'ansible>=8ed6350e65c82292a631f08845dfaacffe7f07f5'

References