ansible/changelogs/fragments/dnf_gpg.yml at f40dde44f417284c591ed21f1b0b275609375f1d - cmueller/ansible - tilera Git

cmueller/ansible

Rick Elrod 9bea33ffa3

[dnf] ensure packages are gpg-verified (#71537 )

Change:
- By default the dnf API does not gpg-verify packages. This is a feature
  that is executed in its CLI code. It never made it into Ansible's
  usage of the API, so packages were previously not verified.
- This fixes CVE-2020-14365.

Test Plan:
- New integration tests

Signed-off-by: Rick Elrod <rick@elrod.me>

2020-08-31 10:47:38 -04:00

2 lines

150 B

YAML

Raw Blame History

	`security_fixes:`
	- dnf - Previously, regardless of the ``disable_gpg_check`` option, packages were not GPG validated. They are now. (CVE-2020-14365)