CuteNews CVE additions

roles/CVE-2020-5558/tasks/main.yml

@@ -0,0 +1,41 @@
+---
+- name: Wait for automatic system updates
+  shell: "while fuser /var/lib/dpkg/lock >/dev/null 2>&1; do sleep 1; done;"
+
+- name: Update package cache
+  apt:
+    update_cache: yes
+
+- name: Install Deps
+  package:
+    name:
+      - nginx
+      - php7.4-common
+      - php7.4-fpm
+      - unzip
+
+- name: Setup Nginx
+  copy:
+    src: default
+    dest: /etc/nginx/sites-available/default
+    owner: root
+    group: root
+    mode: "0644"
+
+- name: Install CuteNews
+  unarchive:
+    src: https://cutephp.com/cutenews/cutenews.2.1.2.zip
+    dest: /var/www/
+    remote_src: yes
+
+- name: Move CuteNews
+  shell: |
+    rm -r /var/www/html
+    mv /var/www/CuteNews /var/www/html
+    chown -R www-data:www-data /var/www/html
+
+- name: Restart nginx
+  service:
+    name: nginx
+    state: restarted
+...