-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-87f5e1e829 2020-03-16 20:26:14.978618 --------------------------------------------------------------------------------
Name : ansible Product : Fedora 32 Version : 2.9.6 Release : 1.fc32 URL : http://ansible.com Summary : SSH-based configuration management, deployment, and task execution system Description : Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically.
-------------------------------------------------------------------------------- Update Information:
Update to 2.9.6 bugfix release and 2 CVE fixes: CVE-2020-1737, CVE-2020-1739 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Kevin Fenzi kevin@scrye.com - 2.9.6-1 - Update to 2.9.6. Fixes bug #1810373 - fixes for CVE-2020-1737, CVE-2020-1739 * Thu Feb 13 2020 Kevin Fenzi kevin@scrye.com - 2.9.5-1 - Update to 2.9.5. Fixes bug #1802725 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 2.9.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Tue Jan 21 2020 Kevin Fenzi kevin@scrye.com - 2.9.4-1 - Update to 2.9.4 with one bugfix. * Thu Jan 16 2020 Kevin Fenzi kevin@scrye.com - 2.9.3-1 - Update to 2.9.3. * Sun Dec 8 2019 Kevin Fenzi kevin@scrye.com - 2.9.2-1 - Update to 2.9.2. * Thu Nov 14 2019 Kevin Fenzi kevin@scrye.com - 2.9.1-2 - Add Requires for python3-pyyaml * Wed Nov 13 2019 Kevin Fenzi kevin@scrye.com - 2.9.1-1 - Update to 2.9.1. * Fri Nov 8 2019 Kevin Fenzi kevin@scrye.com - 2.9.0-2 - Supress pwsh requires added by rpm. * Thu Oct 31 2019 Kevin Fenzi kevin@scrye.com - 2.9.0-1 - Update to 2.9.0. * Thu Oct 17 2019 Kevin Fenzi kevin@scrye.com - 2.8.6-1 - Update to 2.8.6. - Rework spec file to drop old conditionals. * Thu Oct 10 2019 Kevin Fenzi kevin@scrye.com - 2.8.5-2 - Make python3-paramiko and python3-winrm Recommended so they install on Fedora and not RHEL8 * Fri Sep 13 2019 Kevin Fenzi kevin@scrye.com - 2.8.5-1 - Update to 2.8.5. * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 2.8.4-2 - Rebuilt for Python 3.8 * Fri Aug 16 2019 Kevin Fenzi kevin@scrye.com - 2.8.4-1 - Update to 2.8.4. Fixes CVE-2019-10217 and CVE-2019-10206 * Thu Jul 25 2019 Kevin Fenzi kevin@scrye.com - 2.8.3-1 - Update to 2.8.3. * Wed Jul 24 2019 Fedora Release Engineering releng@fedoraproject.org - 2.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Wed Jul 3 2019 Kevin Fenzi kevin@scrye.com - 2.8.2-1 - Update to 2.8.2. Fixes bug #1726846 * Sun Jun 9 2019 Kevin Fenzi kevin@scrye.com - 2.8.1-1 - Update to 2.8.1. Fixes bug #1718131 - Sync up Requires/Buildrequires with upstream. - Add patch for python 3.8 building. Fixes bug #1712531 - Add patch for CVE-2019-10156. * Fri May 17 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-2 - Fixes for various releases build/test issues. * Fri May 17 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-1 - Update to 2.8.0 final. - Add datadirs for other packages to land ansible files in. * Fri May 10 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.4rc3 - Update to 2.8.0 rc3. * Thu May 2 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.3rc2 - Update to 2.8.0 rc2. * Fri Apr 26 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.2rc1 - Update to 2.8.0 rc1. * Mon Apr 22 2019 Kevin Fenzi kevin@scrye.com - 2.8.0-0.1b - Update to 2.8.0 beta 1. * Thu Apr 4 2019 Kevin Fenzi kevin@scrye.com - 2.7.10-1 - Update to 2.7.10. Fixes bug #1696379 * Thu Mar 14 2019 Kevin Fenzi kevin@scrye.com - 2.7.9-1 - Update to 2.7.9. Fixes bug #1688974 * Thu Feb 21 2019 Kevin Fenzi kevin@scrye.com - 2.7.8-1 - Update to 2.7.8. Fixes bug #1679787 - Fix for CVE-2019-3828 * Thu Feb 7 2019 Kevin Fenzi kevin@scrye.com - 2.7.7-1 - Update to 2.7.7. Fixes bug #1673761 * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 2.7.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jan 17 2019 Kevin Fenzi kevin@scrye.com - 2.7.6-1 - Update to 2.7.6. * Thu Dec 13 2018 Kevin Fenzi kevin@scrye.com - 2.7.5-1 - Update to 2.7.5 * Mon Dec 3 2018 Kevin Fenzi kevin@scrye.com - 2.7.4-1 - Update to 2.7.4 * Thu Nov 29 2018 Kevin Fenzi kevin@scrye.com - 2.7.3-1 - Update to 2.7.3 * Thu Nov 15 2018 Kevin Fenzi kevin@scrye.com - 2.7.2-1 - Update to 2.7.2. * Mon Oct 29 2018 Kevin Fenzi kevin@scrye.com - 2.7.1-1 - Update to 2.7.1. * Thu Oct 4 2018 Kevin Fenzi kevin@scrye.com - 2.7.0-1 - Update to 2.7.0 * Fri Sep 28 2018 Kevin Fenzi kevin@scrye.com - 2.6.5-1 - Update to 2.6.5. * Fri Sep 7 2018 Kevin Fenzi kevin@scrye.com - 2.6.4-1 - Update to 2.6.4. * Thu Aug 16 2018 Kevin Fenzi kevin@scrye.com - 2.6.3-1 - Upgrade to 2.6.3. * Sat Jul 28 2018 Kevin Fenzi kevin@scrye.com - 2.6.2-1 - Update to 2.6.2. Fixes bug #1609486 * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 2.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jul 5 2018 Kevin Fenzi kevin@scrye.com - 2.6.1-1 - Update to 2.6.1. Fixes bug #1598602 - Fixes CVE-2018-10874 and CVE-2018-10875 * Mon Jul 2 2018 Miro Hron��ok mhroncok@redhat.com - 2.6.0-2 - Rebuilt for Python 3.7 * Thu Jun 28 2018 Kevin Fenzi kevin@scrye.com - 2.6.0-1 - Update to 2.6.0. Fixes bug #1596424 * Tue Jun 26 2018 Miro Hron��ok mhroncok@redhat.com - 2.5.5-5 - Rebuilt for Python 3.7 * Mon Jun 25 2018 Toshio Kuratomi toshio@fedoraproject.org - - 2.5.5-4 - Upstream patch to build docs with older jinja2 (Fedora 27) - Build changes to build only rst docs for modules and plugins when a distro doesn't have modern enough packages to build the documentation. (EPEL7) * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 2.5.5-3 - Rebuilt for Python 3.7 * Fri Jun 15 2018 Kevin Fenzi kevin@scrye.com - 2.5.5-2 - Stop building docs on F27 as python-jinja2 is too old there. * Thu Jun 14 2018 Kevin Fenzi kevin@scrye.com - 2.5.5-1 - Update to 2.5.5. Fixes bug #1580530 and #1584927 - Fixes 1588855,1590200 (fedora) and 1588855,1590199 (epel) CVE-2018-10855 (security bug with no_log handling) * Thu May 31 2018 Kevin Fenzi kevin@scrye.com - 2.5.4-1 - Update to 2.5.4. Fixes bug #1584927 * Thu May 17 2018 Kevin Fenzi kevin@scrye.com - 2.5.3-1 - Update to 2.5.3. Fixes bug #1579577 and #1574221 * Thu Apr 26 2018 Kevin Fenzi kevin@scrye.com - 2.5.2-1 - Update to 2.5.2 with bugfixes. * Wed Apr 18 2018 Kevin Fenzi kevin@scrye.com - 2.5.1-1 - Update to 2.5.1 with bugfixes. Fixes: #1569270 #1569153 #1566004 #1566001 * Tue Mar 27 2018 Kevin Fenzi kevin@scrye.com - 2.5.0-2 - Some additional python3 fixes. Thanks churchyard! * Sat Mar 24 2018 Kevin Fenzi kevin@scrye.com - 2.5.0-1 - Update to 2.5.0. Fixes bug #1559852 - Spec changes/improvements with tests, docs, and conditionals. * Fri Mar 16 2018 Miro Hron��ok mhroncok@redhat.com - 2.4.3.0-3 - Don't build and ship Python 2 bits on EL > 7 and Fedora > 29 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1805328 - CVE-2020-1737 ansible: Extract-Zip function in win_unzip module does not check extracted path [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805328 [ 2 ] Bug #1810373 - ansible-2.9.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1810373 [ 3 ] Bug #1805321 - CVE-2020-1739 ansible: svn module leaks password when specified as a parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1805321 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-87f5e1e829' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------