Bug 1933672

Summary:	Ansible security advisory RHSA-2021:0663 not included in RHV
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Juan Orti <jortialc>
Component:	ansible	Assignee:	Martin Perina <mperina>
Status:	CLOSED ERRATA	QA Contact:	Pavol Brilla <pbrilla>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.4.4	CC:	arachman, emarcus, ffutigam, mavital, michal.skrivanek, mjankula, mperina
Target Milestone:	ovirt-4.4.6	Keywords:	ZStream
Target Release:	4.4.6
Hardware:	x86_64
OS:	Unspecified
Whiteboard:
Fixed In Version:	ovirt-hosted-engine-setup-2.5.0-2.el8ev, ovirt-engine-4.4.6.5	Doc Type:	Release Note
Doc Text:	Red Hat Virtualization 4.4.6 now requires Ansible 2.9.18	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-06-01 13:23:43 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Juan Orti 2021-03-01 11:55:37 UTC

Description of problem:
The security advisory for Ansible RHSA-2021:0663 has been resolved in ansible-2.9.18-1, but this fix is not included in RHV which requires version 2.9.15.

Version-Release number of selected component (if applicable):
ansible-2.9.15-1.el8ae.noarch

How reproducible:
Always

Steps to Reproduce:
1. Fully update RHV Manager 4.4 or RHVH host 4.4

Actual results:
Vulnerability RHSA-2021:0663 exists.

Expected results:
Ansible security advisories included in RHV.

Additional info:

Comment 11 errata-xmlrpc 2021-06-01 13:23:43 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHV Engine and Host Common Packages security update [ovirt-4.4.6]), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:2180

Comment 12 meital avital 2022-08-14 13:48:28 UTC

Due to QE capacity, we are not going to cover this issue in our automation