The article says fixes have been released. > Resolution ---------- Ansible has r... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		emmelaich on Jan 12, 2017 \| parent \| context \| favorite \| on: Command execution on Ansible controller from host The article says fixes have been released. > Resolution ---------- Ansible has released new versions that fix the vulnerabilities described in this advisory: version 2.1.4 for the 2.1 branch and 2.2.1 for the 2.2 branch.

estefan on Jan 12, 2017 [–]

The article is wrong. Pypi only shows 2.2.0 released in November. That's my point.

ckrailo on Jan 12, 2017 | [–]

Pypi isn't the source-of-record for Ansible releases...

Latest can be found here: https://github.com/ansible/ansible/releases or https://releases.ansible.com/

estefan on Jan 12, 2017 | | [–]

There are only release candidates of the fixed versions on https://releases.ansible.com/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact