summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorToshio Kuratomi <a.badger@gmail.com>2017-09-26 11:25:20 -0700
committerToshio Kuratomi <a.badger@gmail.com>2017-09-26 11:25:20 -0700
commitfd37f27d2bcead8313b52f770469a49d777766f1 (patch)
treece41712235ce465051b5d47721421a3c79a705ac
parent4d5b9ae80372971a72adbb9f62d63a2fdad36f2e (diff)
downloadansible-fd37f27d2bcead8313b52f770469a49d777766f1.tar.gz
Add jenkins_plugin CVE fix to changelog
-rw-r--r--CHANGELOG.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 83f44f7575..b4c7059431 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,9 @@ Ansible Changes By Release
## 2.3.3 "Ramble On" - TBD
### Bugfixes
+* Security fix for CVE-2017-7550 the jenkins_plugin module was logging the jenkins
+ server password if the url_password was passed via the params field:
+ https://github.com/ansible/ansible/pull/30875
* Fix alternatives module handlling of non existing options
* Fix synchronize traceback with the docker connection plugin
* Do not escape backslashes in the template lookup plugin to mirror what the template module does