Public bug reported:
Please sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* SECURITY UPDATE: Sensitive information could be exposed to remote node.
- debian/patches/CVE-2019-10156-1.patch: Don't pass locals.
- debian/patches/CVE-2019-10156-2.patch: Fixed tests.
- CVE-2019-10156
-> Security fix is in newest debian version
Changelog entries since current eoan version 2.7.8+dfsg-1ubuntu1:
ansible (2.8.3+dfsg-1) unstable; urgency=medium
* New upstream release (Closes: #932288)
* This release fixes CVE-2019-10156 (Closes: #930065)
-- Lee Garrett <deb...@rocketjump.eu> Thu, 01 Aug 2019 10:39:19 -0300
** Affects: ansible (Ubuntu)
Importance: Undecided
Status: Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1839312
Title:
Sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ansible/+bug/1839312/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
