From 13b176c1dca7f274ae839d0f6d89845a8c6a2429 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Moritz=20M=C3=BChlenhoff?= Date: Sat, 7 Aug 2021 11:21:06 +0200 Subject: ansible DSA --- data/CVE/list | 3 ++- data/DSA/list | 3 +++ data/dsa-needed.txt | 3 --- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/data/CVE/list b/data/CVE/list index 11810a2169..f530d07994 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -86065,9 +86065,10 @@ CVE-2020-14367 (A flaw was found in chrony versions before 3.5.1 when creating t CVE-2020-14366 (A vulnerability was found in keycloak, where path traversal using URL- ...) NOT-FOR-US: Keycloak CVE-2020-14365 (A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before ...) - - ansible 2.9.13+dfsg-1 + - ansible 2.9.13+dfsg-1 (unimportant) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1869154 NOTE: https://github.com/ansible/ansible/commit/1d043e082b3b1f3ad35c803137f5d3bcbae92275 (v2.9.13) + NOTE: Negligible security impact on Debian systems CVE-2020-14364 (An out-of-bounds read/write access flaw was found in the USB emulator ...) {DSA-4760-1 DLA-2373-1} - qemu 1:5.1+dfsg-4 (bug #968947) diff --git a/data/DSA/list b/data/DSA/list index aa7e8d3af9..78f2647c79 100644 --- a/data/DSA/list +++ b/data/DSA/list @@ -1,3 +1,6 @@ +[07 Aug 2021] DSA-4950-1 ansible - security update + {CVE-2019-10156 CVE-2019-10206 CVE-2019-14846 CVE-2019-14864 CVE-2019-14904 CVE-2020-1733 CVE-2020-1735 CVE-2020-1739 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2020-10684 CVE-2020-10685 CVE-2020-10729 CVE-2020-14330 CVE-2020-14332 CVE-2020-14365 CVE-2021-20228} + [buster] - ansible 2.7.7+dfsg-1+deb10u1 [05 Aug 2021] DSA-4949-1 jetty9 - security update {CVE-2019-10241 CVE-2019-10247 CVE-2020-27216 CVE-2020-27223 CVE-2021-28165 CVE-2021-28169 CVE-2021-34428} [buster] - jetty9 9.4.16-0+deb10u1 diff --git a/data/dsa-needed.txt b/data/dsa-needed.txt index 13fe2c50a7..e2fbac88f9 100644 --- a/data/dsa-needed.txt +++ b/data/dsa-needed.txt @@ -11,9 +11,6 @@ To pick an issue, simply add your uid behind it. If needed, specify the release by adding a slash after the name of the source package. --- -ansible (jmm) - Maintainer prepared an update for review -- asterisk -- -- cgit v1.2.3