Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
13b176c1 by Moritz Mühlenhoff at 2021-08-07T11:21:06+02:00
ansible DSA
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -86065,9 +86065,10 @@ CVE-2020-14367 (A flaw was found in chrony versions
before 3.5.1 when creating t
CVE-2020-14366 (A vulnerability was found in keycloak, where path traversal
using URL- ...)
NOT-FOR-US: Keycloak
CVE-2020-14365 (A flaw was found in the Ansible Engine, in ansible-engine
2.8.x before ...)
- - ansible 2.9.13+dfsg-1
+ - ansible 2.9.13+dfsg-1 (unimportant)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1869154
NOTE:
https://github.com/ansible/ansible/commit/1d043e082b3b1f3ad35c803137f5d3bcbae92275
(v2.9.13)
+ NOTE: Negligible security impact on Debian systems
CVE-2020-14364 (An out-of-bounds read/write access flaw was found in the USB
emulator ...)
{DSA-4760-1 DLA-2373-1}
- qemu 1:5.1+dfsg-4 (bug #968947)
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[07 Aug 2021] DSA-4950-1 ansible - security update
+ {CVE-2019-10156 CVE-2019-10206 CVE-2019-14846 CVE-2019-14864
CVE-2019-14904 CVE-2020-1733 CVE-2020-1735 CVE-2020-1739 CVE-2020-1740
CVE-2020-1746 CVE-2020-1753 CVE-2020-10684 CVE-2020-10685 CVE-2020-10729
CVE-2020-14330 CVE-2020-14332 CVE-2020-14365 CVE-2021-20228}
+ [buster] - ansible 2.7.7+dfsg-1+deb10u1
[05 Aug 2021] DSA-4949-1 jetty9 - security update
{CVE-2019-10241 CVE-2019-10247 CVE-2020-27216 CVE-2020-27223
CVE-2021-28165 CVE-2021-28169 CVE-2021-34428}
[buster] - jetty9 9.4.16-0+deb10u1
=====================================
data/dsa-needed.txt
=====================================
@@ -11,9 +11,6 @@ To pick an issue, simply add your uid behind it.
If needed, specify the release by adding a slash after the name of the source
package.
---
-ansible (jmm)
- Maintainer prepared an update for review
--
asterisk
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13b176c1dca7f274ae839d0f6d89845a8c6a2429
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13b176c1dca7f274ae839d0f6d89845a8c6a2429
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
