OS Command Injection

ansible is vulnerable to OS command injection. The boot function in solariszone.py accepts an unsanitized zone name into an os.system call which would potentially allow an attacker to inject and execute arbitrary OS commands...