Hi all, Ansible 1.9.2 final has been released and is now available. Ansible 1.9.2 addresses two security bugs, so we recommend users update as soon as possible:
* Security fixes to check that hostnames match certificates with https urls (CVE-2015-3908) - get_url and uri modules - url and etcd lookup plugins * Security fixes to the zone (Solaris containers), jail (bsd containers), and chroot connection plugins. These plugins can be used to connect to their respective container types in leiu of the standard ssh connection. Prior to this fix being applied these connection plugins didn't properly handle symlinks within the containers which could lead to files intended to be written to or read from the container being written to or read from the host system instead. (CVE pending) Beyond these two fixes, the following bugs are addressed: * Fixed a bug in the service module where init scripts were being incorrectly used instead of upstart/systemd. * Fixed a bug where sudo/su settings were not inherited from ansible.cfg correctly. * Fixed a bug in the rds module where a traceback may occur due to an unbound variable. * Fixed a bug where certain remote file systems where the SELinux context was not being properly set. * Re-enabled several windows modules which had been partially merged (via action plugins): - win_copy.ps1 - win_copy.py - win_file.ps1 - win_file.py - win_template.py * Fix bug using with_sequence and a count that is zero. Also allows counting backwards isntead of forwards * Fix get_url module bug preventing use of custom ports with https urls * Fix bug disabling repositories in the yum module. * Fix giving yum module a url to install a package from on RHEL/CENTOS5 * Fix bug in dnf module preventing it from working when yum-utils was not already installed As always, this update is available via PyPi and releases.ansible.com now, and packages for distros will be available as soon as possible. Thanks, and enjoy! James Cammarata Director, Ansible Core Engineering github: jimi-c -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAMFyvFhc5g_fPQM5FKDfuXkH4D5znMy7tB2b0abn%3Dqq6DkpHSQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
