Summary: | <app-admin/ansible-1.2.1: Not caching SSH host keys (CVE-2013-2233) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | ishkulov, pinkbyte |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.openwall.com/lists/oss-security/2013/07/01/2 | ||
Whiteboard: | B4 [noglsa] | ||
Package list: | Runtime testing required: | --- |
Description
Agostino Sarubbo
2013-07-03 09:05:10 UTC
Upstream report [1] says that a 1.2.1 release fixing this is expected to be released tomorrow. [1] https://groups.google.com/forum/#!msg/ansible-project/OuHJwG0LLTY/qp95qAq-PNUJ *** Bug 476872 has been marked as a duplicate of this bug. *** + 16 Jul 2013; Sergey Popov <pinkbyte@gentoo.org> +ansible-1.2.1.ebuild, + ansible-9999.ebuild: + Version bump, wrt bug #475602. Remove examples USE-flag due to upstream + changes. Sync live ebuild Arches, please test and mark stable =app-admin/ansible-1.2.1 Target keywords: amd64 x86 amd64 stable x86 stable All done stabling. GLSA? GLSA vote: no GLSA vote: no. Closing noglsa. Oops, wait a second. @maintainers: please remove affected ebuilds. + 24 Aug 2013; Sergey Popov <pinkbyte@gentoo.org> -ansible-1.0.ebuild, + -ansible-1.1.ebuild: + Drop vulnerable versions, wrt bug #475602 |