diff options
| author | Mateusz Piotrowski <0mp@FreeBSD.org> | 2021-06-24 09:57:25 +0000 |
|---|---|---|
| committer | Mateusz Piotrowski <0mp@FreeBSD.org> | 2021-06-24 09:59:09 +0000 |
| commit | 9db99765e3c443cfe7f59a0c5adfdd46a4380804 (patch) | |
| tree | 6dd017375c57207173e2f1b0c48485d24428c527 | |
| parent | eadd6ab41af31a5eb0422c9325b4485052273fe8 (diff) | |
| download | ports-9db99765e3c443cfe7f59a0c5adfdd46a4380804.tar.gz ports-9db99765e3c443cfe7f59a0c5adfdd46a4380804.zip | |
security/vuxml: Document sysutils/py-ansible-core vulnerability
Security: CVE-2021-3583
| -rw-r--r-- | security/vuxml/vuln-2021.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index 54bd2e2f0caa..4cc627077971 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,34 @@ + <vuln vid="4c9159ea-d4c9-11eb-aeee-8c164582fbac"> + <topic>ansible-core -- Templating engine bug</topic> + <affects> + <package> + <name>py36-ansible-core</name> + <name>py37-ansible-core</name> + <name>py38-ansible-core</name> + <name>py39-ansible-core</name> + <range><lt>2.11.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Ansible developers report:</p> + <blockquote cite="https://github.com/ansible/ansible/blob/stable-2.11/changelogs/CHANGELOG-v2.11.rst#security-fixes"> + <p>Templating engine fix for not preserving usnafe status + when trying to preserve newlines.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2021-3583</cvename> + <url>https://github.com/ansible/ansible/blob/stable-2.11/changelogs/CHANGELOG-v2.11.rst#security-fixes</url> + <url>https://github.com/ansible/ansible/pull/74960</url> + </references> + <dates> + <discovery>2021-06-10</discovery> + <entry>2021-06-24</entry> + </dates> + </vuln> + <vuln vid="f3fc2b50-d36a-11eb-a32c-00a0989e4ec1"> <topic>dovecot-pigeonhole -- Sieve excessive resource usage</topic> <affects> |