[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#792833: jessie-pu: package ansible/1.7.2+dfsg-2



Control: tag -1 moreinfo

On Sun, Jul 19, 2015 at 00:39:34 -0400, Harlan Lieberman-Berg wrote:

> Package: release.debian.org
> Severity: normal
> Tags: jessie
> User: release.debian.org@packages.debian.org
> Usertags: pu
> 
> Hello stable team,
> 
> The version of ansible currently in Debian Jessie has a few minor security
> vulnerabilities in it.  I spoke with the security team, and we all agree that
> the vulnerabilities don't rise to the level where a DSA and security upload is
> necessary.  The resolved security issues are  TEMP-0000000-EDD657 and
> CVE-2015-3908.
> 
> I've backported the fixes from the current upstream stable branch back to the
> version in Debian Jessie.  Please let me know if it is clear for me to upload
> to stable.
> 
Please send a debdiff of the proposed changes, generated from a tested
source package, and with a verbose changelog explaining what it fixes,
so we don't have to go look it up or reverse engineer it from the patch.

Thanks,
Julien

Attachment: signature.asc
Description: Digital signature


Reply to: