[Bug 1839312] [NEW] Sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)

Launchpad Bug Tracker 1839312 at bugs.launchpad.net
Wed Aug 7 11:28:08 UTC 2019


You have been subscribed to a public bug by Jean-Louis Dupond (dupondje):

Please sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)

Explanation of the Ubuntu delta and why it can be dropped:
  * SECURITY UPDATE: Sensitive information could be exposed to remote node.
    - debian/patches/CVE-2019-10156-1.patch: Don't pass locals.
    - debian/patches/CVE-2019-10156-2.patch: Fixed tests.
    - CVE-2019-10156

-> Security fix is in newest debian version

Changelog entries since current eoan version 2.7.8+dfsg-1ubuntu1:

ansible (2.8.3+dfsg-1) unstable; urgency=medium

  * New upstream release (Closes: #932288)
  * This release fixes CVE-2019-10156 (Closes: #930065)

 -- Lee Garrett <debian at rocketjump.eu>  Thu, 01 Aug 2019 10:39:19 -0300

** Affects: ansible (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1839312
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list