-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 May 2020 18:49:05 +0200 Source: ansible Architecture: source Version: 2.9.7+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Harlan Lieberman-Berg <hlieber...@debian.org> Changed-By: Lee Garrett <deb...@rocketjump.eu> Closes: 958907 Changes: ansible (2.9.7+dfsg-1) unstable; urgency=medium . * New upstream release * Fix debian/copyright (Closes: #958907) * Tighten dependency on python3-paramiko to ease backports * Fix win_unzip path escape (CVE-2020-1737) * Fix temp dir race condition (CVE-2020-1733) * Fix password on commandline in subversion module (CVE-2020-1739) * Fix ansible vault symlink vulnerability (CVE-2020-1740) * Fix ansible galaxy path escape (CVE-2020-10691) Checksums-Sha1: 77fb7da809a9e4a2fd77db7122d2b1c16f753bb2 2914 ansible_2.9.7+dfsg-1.dsc c401deeadd3a9aa8cc36458a60faa60287b159e5 9252196 ansible_2.9.7+dfsg.orig.tar.xz ff1d99b40ceb075b5b69d8276cb1e7d768d3dcaa 26212 ansible_2.9.7+dfsg-1.debian.tar.xz 25656336c42d819ec6e2d4405e8b28fb08ab5af9 8387 ansible_2.9.7+dfsg-1_amd64.buildinfo Checksums-Sha256: 502c513de2e8123e6fb9539cd081827d16c31979840af3aa8af67f391954ee11 2914 ansible_2.9.7+dfsg-1.dsc d0a1f481e4a27842489ce24405c46a883b661f9906b870a1f5a735355de25b8f 9252196 ansible_2.9.7+dfsg.orig.tar.xz 90b181a7141d5c1da298fdefcbbbf720c1464ead20235c7b624fd66f8f366672 26212 ansible_2.9.7+dfsg-1.debian.tar.xz 01f1c827b15f877b1d6469640291662e4ac1cc111d8f599071c4fdf3f7eefd49 8387 ansible_2.9.7+dfsg-1_amd64.buildinfo Files: ba8fe668cff7062030a22ae5309fb212 2914 admin optional ansible_2.9.7+dfsg-1.dsc 9aa32d43b28aecd93d9ce15712248ef4 9252196 admin optional ansible_2.9.7+dfsg.orig.tar.xz b1c8c8fce05bf1f4e18546c2df5348b9 26212 admin optional ansible_2.9.7+dfsg-1.debian.tar.xz 27a55ad2b8d8874e6989e7fe195147cc 8387 admin optional ansible_2.9.7+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQQzBAEBCgAdFiEE2EfGJRCpwv8kLOAs1gShxII+4PgFAl625+wACgkQ1gShxII+ 4PhqJR//aYTI7vPwQ5RbhX+eEdyq7LDq6WWm5VbaMoHrUM6SUhaKOV+MfgYRkX6I AmQbGD04vJd2XEiWyPOozda3wWyYn8SLrt6lj0JOUoE2xVGVpoPZnkZUS9/AJKfx JRPYQaAEOUFeeLYe5ZQJLTm20F6FzcRCMXatXJI+8rLjxDzBGkoJp4wV3tfqPycZ RYQtpEWmqmiJdtkfwgEQJ0VeV+DAoXi4ze4sG1sFNG/Qq/jaE13UXqVpGwCBINEZ mZQ9s8dIr3H30+VmvMRfeU3XNk+LikSDSwwtHwXvGm9ofZG3apBsf2/qOkv4FihM bOlxecWUn9F+Wo/fUoUMVXJ69LZhbW4/rPzoHZBd74R4SwcfmP9Mwu86t48JpeSn WXlCUsWFV6kIzEOwe/ykrGFlSMB3TP3iqhHNu6ViDCpuU3+wXFiGWrE4oFGsv4yr UYd1EK761+KiijwcncHOI4ES4/P9aJxJThJrExnEJaaalNgN6bLaG/STJF6sUcuI ykL3z84FQGUW7vzRtVsHJVXA7VC86xyYCQ4m52MTRPGhHCRdsB78UmD4wZ75nAPP DsYOjFMEEz4i1wSdijDjr55dWTyiebLhfytDZz2tKMuLehFGVdlpuEUZXT9V+3Uy 9ErzfKfg25ZxaFkDWFG70CzSosO5pCKydsE2aE3FxoX+JEwQAoD2LDcwdvSDVxLb biWRcaORmZ6bONEdwajxK1t4S7DWM6fqZNB2wbXpPO5qJ96cqR4uBOVbrBuA+QDO nSsWDhqIEnqO+E1QStFZpJAEj8gMwcKIPiLwDnz0FgI6pz8VxBcrRU6qCUiMeR41 VwB0A8xWpomTQXPjdoXmtupq2FYkRO6y1PRKBWGyhA7dq6Wp+hexDch5NYUetdBz miKwYJhKJu73CHwYM8NHHPe1v5O3MCvO3dJU6IClDJ/u9YhA4CKlTvzxIcJCJ+rZ gn27tUDry4IaN3D1tMCd4tJHuxCnQS1nHgrW+ioCDspBS+R1WJnWy3FraGg6fKTy s2rjFJ7B5Zoxh61z1Rk+/2YYIoKlbDR3i/xLbPAuBaqM3qVXopGlD1AePYOVFFVE CUZL/BdKnr7/wl+ls7JCj9N8gU8jmFT71XVa3fOielUzMsJK/KXVtkYA4mkJNBv4 3j1BjHPCUI5sgJB6SW+QFqLQyAuFOSfJ8cwxUDf9hhQBRPTITXxGSMWTCO2VzMsJ ifzJzaG4XJxUYhR4ReS/i0L9/WOt8q24xfTKZZNAoD6RLTcrtv4WFywCe/uSv8mO MVWzOjR26tGwmRflo2/XSAme1dGSh2lI9kTm8qA4ighwAhI5RsP22N6g3Me/kr5c 42rNEIyedkJKRoPX4AXb9rWGM6Hfng== =AUVC -----END PGP SIGNATURE-----
