Date: Thu, 24 Jun 2021 09:59:15 GMT From: Mateusz Piotrowski <0mp@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 9db99765e3c4 - main - security/vuxml: Document sysutils/py-ansible-core vulnerability Message-ID: <202106240959.15O9xFg0058970@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by 0mp: URL: https://cgit.FreeBSD.org/ports/commit/?id=9db99765e3c443cfe7f59a0c5adfdd46a4380804 commit 9db99765e3c443cfe7f59a0c5adfdd46a4380804 Author: Mateusz Piotrowski <0mp@FreeBSD.org> AuthorDate: 2021-06-24 09:57:25 +0000 Commit: Mateusz Piotrowski <0mp@FreeBSD.org> CommitDate: 2021-06-24 09:59:09 +0000 security/vuxml: Document sysutils/py-ansible-core vulnerability Security: CVE-2021-3583 --- security/vuxml/vuln-2021.xml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index 54bd2e2f0caa..4cc627077971 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,34 @@ + <vuln vid="4c9159ea-d4c9-11eb-aeee-8c164582fbac"> + <topic>ansible-core -- Templating engine bug</topic> + <affects> + <package> + <name>py36-ansible-core</name> + <name>py37-ansible-core</name> + <name>py38-ansible-core</name> + <name>py39-ansible-core</name> + <range><lt>2.11.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Ansible developers report:</p> + <blockquote cite="https://github.com/ansible/ansible/blob/stable-2.11/changelogs/CHANGELOG-v2.11.rst#security-fixes">; + <p>Templating engine fix for not preserving usnafe status + when trying to preserve newlines.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2021-3583</cvename> + <url>https://github.com/ansible/ansible/blob/stable-2.11/changelogs/CHANGELOG-v2.11.rst#security-fixes</url>; + <url>https://github.com/ansible/ansible/pull/74960</url>; + </references> + <dates> + <discovery>2021-06-10</discovery> + <entry>2021-06-24</entry> + </dates> + </vuln> + <vuln vid="f3fc2b50-d36a-11eb-a32c-00a0989e4ec1"> <topic>dovecot-pigeonhole -- Sieve excessive resource usage</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202106240959.15O9xFg0058970>