[Git][security-tracker-team/security-tracker][master] ansible DSA

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
13b176c1 by Moritz Mühlenhoff at 2021-08-07T11:21:06+02:00
ansible DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -86065,9 +86065,10 @@ CVE-2020-14367 (A flaw was found in chrony versions before 3.5.1 when creating t
 CVE-2020-14366 (A vulnerability was found in keycloak, where path traversal using URL- ...)
 	NOT-FOR-US: Keycloak
 CVE-2020-14365 (A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before ...)
-	- ansible 2.9.13+dfsg-1
+	- ansible 2.9.13+dfsg-1 (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1869154
 	NOTE: https://github.com/ansible/ansible/commit/1d043e082b3b1f3ad35c803137f5d3bcbae92275 (v2.9.13)
+	NOTE: Negligible security impact on Debian systems
 CVE-2020-14364 (An out-of-bounds read/write access flaw was found in the USB emulator  ...)
 	{DSA-4760-1 DLA-2373-1}
 	- qemu 1:5.1+dfsg-4 (bug #968947)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[07 Aug 2021] DSA-4950-1 ansible - security update
+	{CVE-2019-10156 CVE-2019-10206 CVE-2019-14846 CVE-2019-14864 CVE-2019-14904 CVE-2020-1733 CVE-2020-1735 CVE-2020-1739 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2020-10684 CVE-2020-10685 CVE-2020-10729 CVE-2020-14330 CVE-2020-14332 CVE-2020-14365 CVE-2021-20228}
+	[buster] - ansible 2.7.7+dfsg-1+deb10u1
 [05 Aug 2021] DSA-4949-1 jetty9 - security update
 	{CVE-2019-10241 CVE-2019-10247 CVE-2020-27216 CVE-2020-27223 CVE-2021-28165 CVE-2021-28169 CVE-2021-34428}
 	[buster] - jetty9 9.4.16-0+deb10u1


=====================================
data/dsa-needed.txt
=====================================
@@ -11,9 +11,6 @@ To pick an issue, simply add your uid behind it.
 
 If needed, specify the release by adding a slash after the name of the source package.
 
---
-ansible (jmm)
-  Maintainer prepared an update for review
 --
 asterisk
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13b176c1dca7f274ae839d0f6d89845a8c6a2429

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13b176c1dca7f274ae839d0f6d89845a8c6a2429
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210807/e4cfa92e/attachment-0001.htm>