Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ansible for openSUSE:Factory checked in at 2021-02-19 23:45:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ansible (Old) and /work/SRC/openSUSE:Factory/.ansible.new.28504 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ansible" Fri Feb 19 23:45:35 2021 rev:75 rq:873717 version:2.9.18 Changes: -------- --- /work/SRC/openSUSE:Factory/ansible/ansible.changes 2021-01-19 16:04:02.667547205 +0100 +++ /work/SRC/openSUSE:Factory/.ansible.new.28504/ansible.changes 2021-02-19 23:46:14.527420852 +0100 @@ -1,0 +2,16 @@ +Fri Feb 19 08:40:14 UTC 2021 - Michael Str??der <mich...@stroeder.com> + +- update to version 2.9.18 + * CVE-2021-20228 where default and fallback values for no_log parameters + to modules were not previously masked. + * CVE-2021-20178 where several parameters to the snmp_facts module were + logged and displayed despite containing sensitive information. + * CVE-2021-20180 where several parameters to the + bitbucket_pipeline_variable were logged and displayed despite + containing sensitive information. + * CVE-2021-20191 which addresses a number of modules whose parameters + were logged and displayed despite containing sensitive + information. For the full list of affected modules, refer to the + changelog linked below. + +------------------------------------------------------------------- Old: ---- ansible-2.9.17.tar.gz ansible-2.9.17.tar.gz.sha New: ---- ansible-2.9.18.tar.gz ansible-2.9.18.tar.gz.sha ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ansible.spec ++++++ --- /var/tmp/diff_new_pack.p1wmHg/_old 2021-02-19 23:46:15.215421526 +0100 +++ /var/tmp/diff_new_pack.p1wmHg/_new 2021-02-19 23:46:15.219421530 +0100 @@ -222,7 +222,7 @@ Recommends: sshpass %endif Name: ansible -Version: 2.9.17 +Version: 2.9.18 Release: 0 Summary: SSH-based configuration management, deployment, and task execution system License: GPL-3.0-or-later ++++++ ansible-2.9.17.tar.gz -> ansible-2.9.18.tar.gz ++++++ /work/SRC/openSUSE:Factory/ansible/ansible-2.9.17.tar.gz /work/SRC/openSUSE:Factory/.ansible.new.28504/ansible-2.9.18.tar.gz differ: char 5, line 1 ++++++ ansible-2.9.17.tar.gz.sha -> ansible-2.9.18.tar.gz.sha ++++++ --- /work/SRC/openSUSE:Factory/ansible/ansible-2.9.17.tar.gz.sha 2021-01-19 16:04:02.619547133 +0100 +++ /work/SRC/openSUSE:Factory/.ansible.new.28504/ansible-2.9.18.tar.gz.sha 2021-02-19 23:46:14.499420824 +0100 @@ -1 +1 @@ -d78b46d647d91dd478ba7f43baf36ffa27f9a5992b826b16a6cc15cf993f19dc ansible-2.9.17.tar.gz +55fee77729eab2dce854c94a7b6998f0fcb7b9a053bdaa7eb4057f01a0d5d93c ansible-2.9.18.tar.gz