[Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-14858/ansible

Salvatore Bonaccorso carnil at debian.org
Mon Oct 14 20:50:23 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bc300c7c by Salvatore Bonaccorso at 2019-10-14T19:48:55Z
Update information on CVE-2019-14858/ansible

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7435,9 +7435,9 @@ CVE-2019-14859 [DER encoding is not being verified in signatures]
 	NOTE: Fix for CVE-2019-14853 fixes as well CVE-2019-14859.
 CVE-2019-14858 [sub parameters marked as no_log are not masked in certain failure scenarios]
 	RESERVED
-	- ansible <undetermined>
+	- ansible <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1760593
-	TODO: check after Red Hat provides information on https://bugzilla.redhat.com/show_bug.cgi?id=1760593#c5
+	NOTE: https://github.com/ansible/ansible/pull/63405
 CVE-2019-14857
 	RESERVED
 	- libapache2-mod-auth-openidc <unfixed> (bug #942165)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bc300c7c0ae855c56f4da801922f90c0edee68d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bc300c7c0ae855c56f4da801922f90c0edee68d9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191014/17d637d8/attachment.html>


More information about the debian-security-tracker-commits mailing list