summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRick Elrod <rick@elrod.me>2020-08-31 20:13:44 -0500
committerRick Elrod <rick@elrod.me>2020-08-31 20:13:44 -0500
commit01d9ef008b90cea57c128728cb56eec0974269f8 (patch)
tree25d0ecbf2ad023a621f0aa81c4727d9a2b687a2e
parent83eda14330a9fb0c58b55ac7e38aa247fce6559e (diff)
downloadansible-01d9ef008b90cea57c128728cb56eec0974269f8.tar.gz
New release v2.8.15v2.8.15
-rw-r--r--changelogs/.changes.yaml8
-rw-r--r--changelogs/CHANGELOG-v2.8.rst17
-rw-r--r--changelogs/fragments/v2.8.15_summary.yaml3
-rw-r--r--lib/ansible/release.py2
4 files changed, 27 insertions, 3 deletions
diff --git a/changelogs/.changes.yaml b/changelogs/.changes.yaml
index 1b6a443968..9727b417d6 100644
--- a/changelogs/.changes.yaml
+++ b/changelogs/.changes.yaml
@@ -1677,12 +1677,18 @@ releases:
- 67794-atomic_move-default-perms.yml
- 67794-default-permissions-warning-fix.yml
- 70762-sanitize-uri-keys.yml
- - ansible-test-pytest-cap.yml
- copy-sanitize-check-mode-invocation-args.yaml
- rpmfluff-compat-fixes.yml
- test-ansible-runner-pin-psutil.yml
- v2.8.14_summary.yaml
release_date: '2020-08-10'
+ 2.8.15:
+ codename: How Many More Times
+ fragments:
+ - cve-2020-1736-revert.yml
+ - dnf_gpg.yml
+ - v2.8.15_summary.yaml
+ release_date: '2020-08-31'
2.8.2:
codename: How Many More Times
fragments:
diff --git a/changelogs/CHANGELOG-v2.8.rst b/changelogs/CHANGELOG-v2.8.rst
index 4a5b3669b0..d62fb3abef 100644
--- a/changelogs/CHANGELOG-v2.8.rst
+++ b/changelogs/CHANGELOG-v2.8.rst
@@ -5,6 +5,22 @@ Ansible 2.8 "How Many More Times" Release Notes
.. contents:: Topics
+v2.8.15
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2020-08-31
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Security Fixes
+--------------
+
+- The fix for CVE-2020-1736 has been reverted. Users are encouraged to specify a ``mode`` parameter in their file-based tasks when the files being manipulated contain sensitive data.
+- dnf - Previously, regardless of the ``disable_gpg_check`` option, packages were not GPG validated. They are now. (CVE-2020-14365)
+
v2.8.14
=======
@@ -36,7 +52,6 @@ Bugfixes
- Address compat with rpmfluff-0.6 for integration tests
- add constraints file for ``anisble_runner`` test since an update to ``psutil`` is now causing test failures
-- ansible-test - Add ``pytest < 6.0.0`` constraint for managed installations on Python 3.x to avoid issues with relative imports.
v2.8.13
=======
diff --git a/changelogs/fragments/v2.8.15_summary.yaml b/changelogs/fragments/v2.8.15_summary.yaml
new file mode 100644
index 0000000000..5f57f7e218
--- /dev/null
+++ b/changelogs/fragments/v2.8.15_summary.yaml
@@ -0,0 +1,3 @@
+release_summary: |
+ | Release Date: 2020-08-31
+ | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
diff --git a/lib/ansible/release.py b/lib/ansible/release.py
index b4181a543d..03d64b9946 100644
--- a/lib/ansible/release.py
+++ b/lib/ansible/release.py
@@ -19,6 +19,6 @@
from __future__ import (absolute_import, division, print_function)
__metaclass__ = type
-__version__ = '2.8.14.post0'
+__version__ = '2.8.15'
__author__ = 'Ansible, Inc.'
__codename__ = 'How Many More Times'