From 01d9ef008b90cea57c128728cb56eec0974269f8 Mon Sep 17 00:00:00 2001 From: Rick Elrod Date: Mon, 31 Aug 2020 20:13:44 -0500 Subject: New release v2.8.15 --- changelogs/.changes.yaml | 8 +++++++- changelogs/CHANGELOG-v2.8.rst | 17 ++++++++++++++++- changelogs/fragments/v2.8.15_summary.yaml | 3 +++ lib/ansible/release.py | 2 +- 4 files changed, 27 insertions(+), 3 deletions(-) create mode 100644 changelogs/fragments/v2.8.15_summary.yaml diff --git a/changelogs/.changes.yaml b/changelogs/.changes.yaml index 1b6a443968..9727b417d6 100644 --- a/changelogs/.changes.yaml +++ b/changelogs/.changes.yaml @@ -1677,12 +1677,18 @@ releases: - 67794-atomic_move-default-perms.yml - 67794-default-permissions-warning-fix.yml - 70762-sanitize-uri-keys.yml - - ansible-test-pytest-cap.yml - copy-sanitize-check-mode-invocation-args.yaml - rpmfluff-compat-fixes.yml - test-ansible-runner-pin-psutil.yml - v2.8.14_summary.yaml release_date: '2020-08-10' + 2.8.15: + codename: How Many More Times + fragments: + - cve-2020-1736-revert.yml + - dnf_gpg.yml + - v2.8.15_summary.yaml + release_date: '2020-08-31' 2.8.2: codename: How Many More Times fragments: diff --git a/changelogs/CHANGELOG-v2.8.rst b/changelogs/CHANGELOG-v2.8.rst index 4a5b3669b0..d62fb3abef 100644 --- a/changelogs/CHANGELOG-v2.8.rst +++ b/changelogs/CHANGELOG-v2.8.rst @@ -5,6 +5,22 @@ Ansible 2.8 "How Many More Times" Release Notes .. contents:: Topics +v2.8.15 +======= + +Release Summary +--------------- + +| Release Date: 2020-08-31 +| `Porting Guide `__ + + +Security Fixes +-------------- + +- The fix for CVE-2020-1736 has been reverted. Users are encouraged to specify a ``mode`` parameter in their file-based tasks when the files being manipulated contain sensitive data. +- dnf - Previously, regardless of the ``disable_gpg_check`` option, packages were not GPG validated. They are now. (CVE-2020-14365) + v2.8.14 ======= @@ -36,7 +52,6 @@ Bugfixes - Address compat with rpmfluff-0.6 for integration tests - add constraints file for ``anisble_runner`` test since an update to ``psutil`` is now causing test failures -- ansible-test - Add ``pytest < 6.0.0`` constraint for managed installations on Python 3.x to avoid issues with relative imports. v2.8.13 ======= diff --git a/changelogs/fragments/v2.8.15_summary.yaml b/changelogs/fragments/v2.8.15_summary.yaml new file mode 100644 index 0000000000..5f57f7e218 --- /dev/null +++ b/changelogs/fragments/v2.8.15_summary.yaml @@ -0,0 +1,3 @@ +release_summary: | + | Release Date: 2020-08-31 + | `Porting Guide `__ diff --git a/lib/ansible/release.py b/lib/ansible/release.py index b4181a543d..03d64b9946 100644 --- a/lib/ansible/release.py +++ b/lib/ansible/release.py @@ -19,6 +19,6 @@ from __future__ import (absolute_import, division, print_function) __metaclass__ = type -__version__ = '2.8.14.post0' +__version__ = '2.8.15' __author__ = 'Ansible, Inc.' __codename__ = 'How Many More Times' -- cgit v1.2.1