CVE-2016-8614
Fixed in a distro release EPSS 2%CVSS 6.3
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
Products: Red Hat Ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 2.2.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ansible | 2.2.0.0-1 |
| Debian 13 | ansible | 2.2.0.0-1 |
| Debian 14 | ansible | 2.2.0.0-1 |
| SUSE HPE Helion OpenStack 8 | ansible | 2.9.14-3.15.1 |
| SUSE HPE Helion OpenStack 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE HPE Helion OpenStack 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE HPE Helion OpenStack 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE HPE Helion OpenStack 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.12.1 |
| SUSE HPE Helion OpenStack 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.19.2 |
| SUSE HPE Helion OpenStack 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE HPE Helion OpenStack 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE HPE Helion OpenStack 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE HPE Helion OpenStack 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE HPE Helion OpenStack 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE HPE Helion OpenStack 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20200922-3.23.1 |
| SUSE HPE Helion OpenStack 8 | storm | 1.2.3-3.6.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev3-14.32.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| SUSE Manager Client Tools 15 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools 15 | grafana | 9.5.18-150000.1.63.2 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.9-150000.1.47.2 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.27-150000.3.116.2 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.19-150000.3.89.2 |
| SUSE Manager Client Tools 15 | spacewalk-koan | 4.3.6-150000.3.33.2 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.10-150000.1.39.2 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE OpenStack Cloud 8 | ansible | 2.9.14-3.15.1 |
| SUSE OpenStack Cloud 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE OpenStack Cloud 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE OpenStack Cloud 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE OpenStack Cloud 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE OpenStack Cloud 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.12.1 |
| SUSE OpenStack Cloud 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE OpenStack Cloud 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE OpenStack Cloud 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.19.2 |
| SUSE OpenStack Cloud 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE OpenStack Cloud 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE OpenStack Cloud 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE OpenStack Cloud 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE OpenStack Cloud 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE OpenStack Cloud 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE OpenStack Cloud 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE OpenStack Cloud 8 | storm | 1.2.3-3.6.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev3-14.32.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.9.14-3.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1600432272.b3ad722f0-3.44.1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1599037158.5c4d07480-4.43.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.19.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-crowbar-client | 3.9.3-1.1 |
| SUSE OpenStack Cloud Crowbar 8 | storm | 1.2.3-3.6.1 |
| SUSE Package Hub 12 | ansible | 2.4.1.0-6.1 |
| Ubuntu Pro 14.04 LTS | ansible | 1.5.4+dfsg-1ubuntu0.1~esm3 |
| Ubuntu Pro 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.3+esm5 |
| Ubuntu Pro 18.04 LTS | ansible | 2.5.1+dfsg-1ubuntu0.1+esm5 |
| Ubuntu Pro 20.04 LTS | ansible | 2.9.6+dfsg-1ubuntu0.1~esm3 |
| openSUSE Leap 15.5 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | ansible | 2.9.27-150000.1.17.2 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| openSUSE Leap 15.5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| openSUSE Leap 15.5 | spacecmd | 4.3.27-150000.3.116.2 |