Debian Patches

Status for ansible/2.10.7+merged+base+2.10.17+dfsg-0+deb11u1

Patch Description Author Forwarded Bugs Origin Last update
0001-fix-syntax-warnings.patch Fix syntax warnings There are four SyntaxWarning when installing the Debian package, fix those. Lee Garrett <debian@rocketjump.eu> not-needed 2021-03-24
0003-preserve-debian-dir.patch Prevent makefile from deleting debian/=================================================================== Harlan Lieberman-Berg <hlieberman@debian.org> not-needed
0005-use-py3.patch use py3 Use python 3 for all helper scripts during build
.
This allows us to not depend on python 2 anymore for building.
no
0007-fix-interpreter-fallback.patch Fix python interpreter discovery (Closes: #983140) On machines upgrade from buster to bullseye, the wrong interpreter will be
discovered and used, causing the playbook run to fail. Update the fallback list
so it correctly picks python3.9 on bullseye when both 3.9 and 3.7 are present,
which usually is the case on freshly upgrade machines.
not-needed backport, https://github.com/ansible/ansible/commit/c986cbb9961bfaedf1a6ae7f0c2e34be26d9ab12 2021-03-23
0008-fix-CVE-2022-3697.patch Backported fix for CVE-2022-3697 Lee Garrett <debian@rocketjump.eu> no 2024-06-29
0009-fix-CVE-2023-4237.patch [PATCH] Update document to use no_log and register when creating a new keypair. (#1716)

Update document to use no_log and register when creating a new keypair

SUMMARY

"When creating a new keypair the ec2_key module prints out the private key directly to the standard output. This makes it unusable in any kind of public workflow."
To fix this security vulnerability no_log and register should be used while using this module to create a keypair.
ISSUE TYPE

Docs Pull Request

COMPONENT NAME

ADDITIONAL INFORMATION

(cherry picked from commit 39b19d83db072f1854adaac92e05f06abb63dd3e)
GomathiselviS <gomathiselvi@gmail.com> no 2023-08-30
0010-fix-CVE-2023-5115.patch Fix for CVE-2023-5115, based on upstream patch Lee Garrett <debian@rocketjump.eu> not-needed https://github.com/ansible/ansible/pull/81787 2024-07-04
0011-remove-pycrypto-vault-test.patch Remove pycrypto vault tests The removed lines require pycrypto (unavailable in Debian bullseye) to function
and should have been wrapped with a conditional at upstream. Remove them
instead. The following test also requires pycrypto, skip it then.
Lee Garrett <debian@rocketjump.eu> not-needed 2024-07-05
0012-fix-CVE-2023-5764.patch Fix for CVE-2023-5764 not-needed backport, https://github.com/ansible/ansible/pull/82295 2024-07-11
0013-fix-CVE-2024-0690.patch Fix for CVE-2024-0690, based on upstream patch not-needed backport, https://github.com/ansible/ansible/pull/82565 2024-07-11
0014-fix-integration-tests.patch Fix integration tests This one test checks if amazon.aws is *not* installed as a sanity check.
However, since we have the ansible collections in the same package, the
amazon.aws collection will be installed in this case.
Lee Garrett <debian@rocketjump.eu> not-needed 2024-07-11
0015-ansible-galaxy-no-deps.patch Don't call ansible galaxy uncessarily The amazon.aws collection has a dependency so use --no-deps when installing it.
There are already tests for installing dependencies that do not rely on Galaxy.
not-needed backport, https://github.com/ansible/ansible/pull/77091 2024-07-11

All known versions for source package 'ansible'

Links