Debian Package Tracker

Marked for autoremoval on 22 March: #950843 high

Version 13.8.7-6 of chef is marked for autoremoval from testing on Sun 22 Mar 2020. It is affected by #950843. The removal of chef will also cause the removal of (transitive) reverse dependencies: foodcritic, ohai, ruby-cheffish, ruby-compat-resource, ruby-knife-acl, ruby-ridley. You should try to prevent the removal by fixing these RC bugs.

Created: 2020-02-14 Last update: 2020-02-23 23:03

A new upstream version is available: 16.0.73 high

A new upstream version 16.0.73 is available, you should consider packaging it.

Created: 2018-08-23 Last update: 2020-02-23 19:51

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2015-8559: The knife bootstrap command in chef leaks the validator.pem private RSA key to /var/log/messages.

Please fix it.

Created: 2019-07-07 Last update: 2020-02-16 05:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2015-8559: The knife bootstrap command in chef leaks the validator.pem private RSA key to /var/log/messages.

Please fix it.

Created: 2015-12-15 Last update: 2020-02-16 05:30

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2015-8559: The knife bootstrap command in chef leaks the validator.pem private RSA key to /var/log/messages.

Please fix it.

Created: 2019-03-10 Last update: 2020-02-16 05:30

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2015-8559: The knife bootstrap command in chef leaks the validator.pem private RSA key to /var/log/messages.

Please fix it.

Created: 2015-12-15 Last update: 2020-02-16 05:30

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2015-8559: The knife bootstrap command in chef leaks the validator.pem private RSA key to /var/log/messages.

Please fix it.

Created: 2016-11-07 Last update: 2020-02-16 05:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.1.4).

Created: 2018-08-20 Last update: 2020-02-14 20:06