# Ansible 1.6.6 - refinements to previous security fixes

**URL:** <https://forum.ansible.com/t/ansible-1-6-6-refinements-to-previous-security-fixes/15587>\
**Category:** Ansible Project\
**Created:** [July 1, 2014, 7:52pm UTC](https://forum.ansible.com/t/ansible-1-6-6-refinements-to-previous-security-fixes/15587 "2014-07-01T19:52:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\
**Post date:** [July 1, 2014, 7:52pm UTC](https://forum.ansible.com/t/ansible-1-6-6-refinements-to-previous-security-fixes/15587/1 "2014-07-01T19:52:52Z")

</div>

Hi everyone,

Today we have updated Ansible to 1.6.6.

As you may remember, last week we updated our remote data checking code to lock down some security items, and the result of that was that our great open source community kicked in, and found some especially clever variations that needed to be locked down further - and we’ve taken steps to be a lot more heavy handed in the approach that this code was taking.

Like before, these deal with being careful with untrusted data from pre-compromised remote hosts - and all Ansible users should upgrade. We hope to be completely done with this series of changes after this round.

As a reminder, ansible practices responsible disclosure on security items, if you find problems, please email [security@ansible.com](mailto:security@ansible.com) and we’ll get back to you ASAP.

1.6.6 is available in PyPi now.

–Michael

---

<div class="post-metadata">

**Author:** ![Shaun\_Zinck](https://avatars.discourse-cdn.com/v4/letter/s/49beb7/32.png) [@Shaun\_Zinck](https://forum.ansible.com/u/Shaun_Zinck)\
**Post date:** [July 3, 2014, 12:31pm UTC](https://forum.ansible.com/t/ansible-1-6-6-refinements-to-previous-security-fixes/15587/2 "2014-07-03T12:31:14Z")

</div>

Thanks Michael. Do you know if any of these issues affect 1.4 or 1.5?

-Shaun

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\
**Post date:** [July 3, 2014, 12:32pm UTC](https://forum.ansible.com/t/ansible-1-6-6-refinements-to-previous-security-fixes/15587/3 "2014-07-03T12:32:14Z")

</div>

Hi Shaun,

They effect all previous versions, so yes all users should upgrade to the latest.