# CentOS 6.6 gmp is latest; warning still there

**URL:** <https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475>\
**Category:** Ansible Project\
**Created:** [February 9, 2015, 3:34pm UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475 "2015-02-09T15:34:58Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chris\_Short](https://avatars.discourse-cdn.com/v4/letter/c/ac8455/32.png) [@Chris\_Short](https://forum.ansible.com/u/Chris_Short)\
**Post date:** [February 9, 2015, 3:34pm UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475/1 "2015-02-09T15:34:58Z")

</div>

I just built a clean CentOS 6.6 server and have ansible installed. All packages are up to date and I’m still seeing this error:

[WARNING]: The version of gmp you have installed has a known issue regarding  
timing vulnerabilities when used with pycrypto. If possible, you should update  
it (i.e. yum update gmp).

I believe I have seen this discussed elsewhere but is there a solid resolution for this?

---

<div class="post-metadata">

**Author:** ![James\_Cammarata](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@James\_Cammarata](https://forum.ansible.com/u/James_Cammarata)\
**Post date:** [February 10, 2015, 4:28am UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475/2 "2015-02-10T04:28:25Z")

</div>

Hi Chris, you can disable this warning in your ansible.cfg file (system\_warnings=no).

---

<div class="post-metadata">

**Author:** ![Giovanni\_Tirloni](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Giovanni\_Tirloni](https://forum.ansible.com/u/Giovanni_Tirloni)\
**Post date:** [February 13, 2015, 11:00am UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475/3 "2015-02-13T11:00:55Z")

</div>

Relevant discussion:

[https://github.com/ansible/ansible/issues/6941](https://github.com/ansible/ansible/issues/6941)  
[https://bugzilla.redhat.com/show\_bug.cgi?id=1103566](https://bugzilla.redhat.com/show_bug.cgi?id=1103566)

Giovanni

---

<div class="post-metadata">

**Author:** ![Toshio\_Kuratomi](https://avatars.discourse-cdn.com/v4/letter/t/41988e/32.png) [@Toshio\_Kuratomi](https://forum.ansible.com/u/Toshio_Kuratomi)\
**Post date:** [February 13, 2015, 10:46pm UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475/4 "2015-02-13T22:46:13Z")

</div>

I reanalyzed the bug today and working with the EPEL maintainer,  
submitted an updated python-crypto2.6 package:  
[https://admin.fedoraproject.org/updates/python-crypto2.6-2.6.1-2.el6](https://admin.fedoraproject.org/updates/python-crypto2.6-2.6.1-2.el6)

It's not ideal as it disables the C extension in order to make the  
code more secure but i don't think that will be too bad for ansible's  
usage. This is only used for vault and vault typically isn't doing  
enough encryption and decryption for the speed difference to matter.

-toshio

---

<div class="post-metadata">

**Author:** ![Chris\_Short](https://avatars.discourse-cdn.com/v4/letter/c/ac8455/32.png) [@Chris\_Short](https://forum.ansible.com/u/Chris_Short)\
**Post date:** [February 13, 2015, 11:36pm UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475/5 "2015-02-13T23:36:35Z")

</div>

Awesome! Thank you.

---

<div class="post-metadata">

**Author:** ![Vikas\_Kumar](https://avatars.discourse-cdn.com/v4/letter/v/ecb155/32.png) [@Vikas\_Kumar](https://forum.ansible.com/u/Vikas_Kumar)\
**Post date:** [October 24, 2015, 6:29am UTC](https://forum.ansible.com/t/centos-6-6-gmp-is-latest-warning-still-there/17475/6 "2015-10-24T06:29:47Z")

</div>

I confirm this works on CentOS 6.3, one has to enable epel repo though.

**Warning**

`

# ansible-playbook --version

[WARNING]: The version of gmp you have installed has a known issue regarding  
timing vulnerabilities when used with pycrypto. If possible, you should update  
it (i.e. yum update gmp).

ansible-playbook 1.9.2  
configured module search path = /opt/ansible/modules
