-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-0cab7041f7 2020-03-15 14:00:11.698454 --------------------------------------------------------------------------------
Name : ansible Product : Fedora 30 Version : 2.9.6 Release : 1.fc30 URL : http://ansible.com Summary : SSH-based configuration management, deployment, and task execution system Description : Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically.
-------------------------------------------------------------------------------- Update Information:
Update to 2.9.6 bugfix release and 2 CVE fixes: CVE-2020-1737, CVE-2020-1739 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Kevin Fenzi kevin@scrye.com - 2.9.6-1 - Update to 2.9.6. Fixes bug #1810373 - fixes for CVE-2020-1737, CVE-2020-1739 * Thu Feb 13 2020 Kevin Fenzi kevin@scrye.com - 2.9.5-1 - Update to 2.9.5. Fixes bug #1802725 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 2.9.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Tue Jan 21 2020 Kevin Fenzi kevin@scrye.com - 2.9.4-1 - Update to 2.9.4 with one bugfix. * Thu Jan 16 2020 Kevin Fenzi kevin@scrye.com - 2.9.3-1 - Update to 2.9.3. * Sun Dec 8 2019 Kevin Fenzi kevin@scrye.com - 2.9.2-1 - Update to 2.9.2. * Thu Nov 14 2019 Kevin Fenzi kevin@scrye.com - 2.9.1-2 - Add Requires for python3-pyyaml * Wed Nov 13 2019 Kevin Fenzi kevin@scrye.com - 2.9.1-1 - Update to 2.9.1. * Fri Nov 8 2019 Kevin Fenzi kevin@scrye.com - 2.9.0-2 - Supress pwsh requires added by rpm. * Thu Oct 31 2019 Kevin Fenzi kevin@scrye.com - 2.9.0-1 - Update to 2.9.0. * Thu Oct 17 2019 Kevin Fenzi kevin@scrye.com - 2.8.6-1 - Update to 2.8.6. - Rework spec file to drop old conditionals. * Thu Oct 10 2019 Kevin Fenzi kevin@scrye.com - 2.8.5-2 - Make python3-paramiko and python3-winrm Recommended so they install on Fedora and not RHEL8 * Fri Sep 13 2019 Kevin Fenzi kevin@scrye.com - 2.8.5-1 - Update to 2.8.5. * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 2.8.4-2 - Rebuilt for Python 3.8 * Fri Aug 16 2019 Kevin Fenzi kevin@scrye.com - 2.8.4-1 - Update to 2.8.4. Fixes CVE-2019-10217 and CVE-2019-10206 * Thu Jul 25 2019 Kevin Fenzi kevin@scrye.com - 2.8.3-1 - Update to 2.8.3. * Wed Jul 24 2019 Fedora Release Engineering releng@fedoraproject.org - 2.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Wed Jul 3 2019 Kevin Fenzi kevin@scrye.com - 2.8.2-1 - Update to 2.8.2. Fixes bug #1726846 * Sun Jun 9 2019 Kevin Fenzi kevin@scrye.com - 2.8.1-1 - Update to 2.8.1. Fixes bug #1718131 - Sync up Requires/Buildrequires with upstream. - Add patch for python 3.8 building. Fixes bug #1712531 - Add patch for CVE-2019-10156. * Fri May 17 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-2 - Fixes for various releases build/test issues. * Fri May 17 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-1 - Update to 2.8.0 final. - Add datadirs for other packages to land ansible files in. * Fri May 10 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.4rc3 - Update to 2.8.0 rc3. * Thu May 2 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.3rc2 - Update to 2.8.0 rc2. * Fri Apr 26 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.2rc1 - Update to 2.8.0 rc1. * Mon Apr 22 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.1b - Update to 2.8.0 beta 1. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1805328 - CVE-2020-1737 ansible: Extract-Zip function in win_unzip module does not check extracted path [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805328 [ 2 ] Bug #1810373 - ansible-2.9.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1810373 [ 3 ] Bug #1805321 - CVE-2020-1739 ansible: svn module leaks password when specified as a parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805321 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-0cab7041f7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------