[Bug 1839312] [NEW] Sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)
Launchpad Bug Tracker
1839312 at bugs.launchpad.net
Wed Aug 7 11:28:08 UTC 2019
You have been subscribed to a public bug by Jean-Louis Dupond (dupondje):
Please sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* SECURITY UPDATE: Sensitive information could be exposed to remote node.
- debian/patches/CVE-2019-10156-1.patch: Don't pass locals.
- debian/patches/CVE-2019-10156-2.patch: Fixed tests.
- CVE-2019-10156
-> Security fix is in newest debian version
Changelog entries since current eoan version 2.7.8+dfsg-1ubuntu1:
ansible (2.8.3+dfsg-1) unstable; urgency=medium
* New upstream release (Closes: #932288)
* This release fixes CVE-2019-10156 (Closes: #930065)
-- Lee Garrett <debian at rocketjump.eu> Thu, 01 Aug 2019 10:39:19 -0300
** Affects: ansible (Ubuntu)
Importance: Undecided
Status: New
--
Sync ansible 2.8.3+dfsg-1 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1839312
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.
More information about the Ubuntu-sponsors
mailing list