tocsin

CVE-2017-7481

2 advisories.

PyPI/ansible CVE-2017-7481: critical 9.8

Ansible fails to properly mark lookup-plugin results as unsafe

Action: Upgrade ansible to 2.1.6.0 or later.

pip install ansible==2.3.1.0
pip install ansible==2.1.6.0
pip install ansible==2.2.3.0

Affected

introducedfixedlast affected
2.3.0.02.3.1.0-
02.1.6.0-
2.2.0.02.2.3.0-

Fixed versions

2.3.1.02.1.6.02.2.3.0

Sources

CVE-2017-7481 · published · modified · JSON

PyPI/ansible CVE-2017-7481: unknown

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be

Action: Upgrade ansible to 2.3.1.0 or later.

pip install ansible==2.3.1.0
pip install ansible==2.4.0.0

Affected

introducedfixedlast affected
02.3.1.0-
2.3.2.02.4.0.0-

Fixed versions

2.3.1.02.4.0.0

Sources

CVE-2017-7481 · published · modified · JSON