Release 6.6.8.

This commit is contained in:
Felix Fontein 2024-03-25 14:10:36 +01:00
commit 09b3253edd
8 changed files with 160 additions and 105 deletions

View file

@ -1619,3 +1619,28 @@ releases:
- 7379-url.yml
- 7467-fix-gitlab-constants-calls.yml
release_date: '2023-11-04'
6.6.8:
changes:
bugfixes:
- aix_filesystem - fix issue with empty list items in crfs logic and option
order (https://github.com/ansible-collections/community.general/pull/8052).
- pacemaker_cluster - actually implement check mode, which the module claims
to support. This means that until now the module also did changes in check
mode (https://github.com/ansible-collections/community.general/pull/8081).
- pam_limits - when the file does not exist, do not create it in check mode
(https://github.com/ansible-collections/community.general/issues/8050, https://github.com/ansible-collections/community.general/pull/8057).
release_summary: Security and bugfix release.
security_fixes:
- cobbler, gitlab_runners, icinga2, linode, lxd, nmap, online, opennebula, proxmox,
scaleway, stackpath_compute, virtualbox, and xen_orchestra inventory plugin
- make sure all data received from the remote servers is marked as unsafe,
so remote code execution by obtaining texts that can be evaluated as templates
is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/,
https://github.com/ansible-collections/community.general/pull/8098).
fragments:
- 6.6.8.yml
- 8057-pam_limits-check-mode.yml
- aix_filesystem-crfs-issue.yml
- inventory-rce.yml
- pacemaker-cluster.yml
release_date: '2024-03-25'

View file

@ -1 +0,0 @@
release_summary: Security and bugfix release.

View file

@ -1,2 +0,0 @@
bugfixes:
- "pam_limits - when the file does not exist, do not create it in check mode (https://github.com/ansible-collections/community.general/issues/8050, https://github.com/ansible-collections/community.general/pull/8057)."

View file

@ -1,3 +0,0 @@
---
bugfixes:
- aix_filesystem - fix issue with empty list items in crfs logic and option order (https://github.com/ansible-collections/community.general/pull/8052).

View file

@ -1,6 +0,0 @@
security_fixes:
- "cobbler, gitlab_runners, icinga2, linode, lxd, nmap, online, opennebula, proxmox, scaleway, stackpath_compute, virtualbox,
and xen_orchestra inventory plugin - make sure all data received from the remote servers is marked as unsafe, so remote
code execution by obtaining texts that can be evaluated as templates is not possible
(https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/,
https://github.com/ansible-collections/community.general/pull/8098)."

View file

@ -1,3 +0,0 @@
bugfixes:
- "pacemaker_cluster - actually implement check mode, which the module claims to support. This means that until now the module
also did changes in check mode (https://github.com/ansible-collections/community.general/pull/8081)."