[ GLSA 201411-09 ] Ansible: Privilege escalation

[GLSA]

Gentoo Linux Security Advisory

Title: Ansible: Privilege escalation (GLSA 201411-09)
Severity: normal
Exploitable: local
Date: November 23, 2014
Bug(s): #516564, #517770
ID: 201411-09

Synopsis

Multiple vulnerabilities has been found in Ansible which may allow
local privilege escalation.


Background

Ansible is a radically simple IT automation platform.

Affected Packages

Package: app-admin/ansible
Vulnerable: < 1.6.8
Unaffected: >= 1.6.8
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Ansible. Please review
the CVE identifiers referenced below for details.


Impact

A local attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or obtain
sensitive information.


Workaround

There is no known workaround at this time.

Resolution

All Ansible users should upgrade to the latest version: