Fedora 31: ansible FEDORA-2020-a3f12bcff4

    Date 15 Mar 2020
    68
    Posted By LinuxSecurity Advisories
    Update to 2.9.6 bugfix release and 2 CVE fixes: CVE-2020-1737, CVE-2020-1739
    --------------------------------------------------------------------------------
    Fedora Update Notification
    FEDORA-2020-a3f12bcff4
    2020-03-15 13:42:08.662202
    --------------------------------------------------------------------------------
    
    Name        : ansible
    Product     : Fedora 31
    Version     : 2.9.6
    Release     : 1.fc31
    URL         : https://ansible.com
    Summary     : SSH-based configuration management, deployment, and task execution system
    Description :
    Ansible is a radically simple model-driven configuration management,
    multi-node deployment, and remote task execution system. Ansible works
    over SSH and does not require any software or daemons to be installed
    on remote nodes. Extension modules can be written in any language and
    are transferred to managed machines automatically.
    
    --------------------------------------------------------------------------------
    Update Information:
    
    Update to 2.9.6 bugfix release and 2 CVE fixes: CVE-2020-1737, CVE-2020-1739
    --------------------------------------------------------------------------------
    ChangeLog:
    
    * Fri Mar  6 2020 Kevin Fenzi  - 2.9.6-1
    - Update to 2.9.6. Fixes bug #1810373
    - fixes for CVE-2020-1737, CVE-2020-1739
    * Thu Feb 13 2020 Kevin Fenzi  - 2.9.5-1
    - Update to 2.9.5. Fixes bug #1802725
    * Tue Jan 28 2020 Fedora Release Engineering  - 2.9.4-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
    * Tue Jan 21 2020 Kevin Fenzi  - 2.9.4-1
    - Update to 2.9.4 with one bugfix.
    * Thu Jan 16 2020 Kevin Fenzi  - 2.9.3-1
    - Update to 2.9.3.
    * Sun Dec  8 2019 Kevin Fenzi  - 2.9.2-1
    - Update to 2.9.2.
    * Thu Nov 14 2019 Kevin Fenzi  - 2.9.1-2
    - Add Requires for python3-pyyaml
    * Wed Nov 13 2019 Kevin Fenzi  - 2.9.1-1
    - Update to 2.9.1.
    * Fri Nov  8 2019 Kevin Fenzi  - 2.9.0-2
    - Supress pwsh requires added by rpm.
    * Thu Oct 31 2019 Kevin Fenzi  - 2.9.0-1
    - Update to 2.9.0.
    * Thu Oct 17 2019 Kevin Fenzi  - 2.8.6-1
    - Update to 2.8.6.
    - Rework spec file to drop old conditionals.
    * Thu Oct 10 2019 Kevin Fenzi  - 2.8.5-2
    - Make python3-paramiko and python3-winrm Recommended so they install on Fedora and not RHEL8
    --------------------------------------------------------------------------------
    References:
    
      [ 1 ] Bug #1805328 - CVE-2020-1737 ansible: Extract-Zip function in win_unzip module does not check extracted path [fedora-all]
            https://bugzilla.redhat.com/show_bug.cgi?id=1805328
      [ 2 ] Bug #1810373 - ansible-2.9.6 is available
            https://bugzilla.redhat.com/show_bug.cgi?id=1810373
      [ 3 ] Bug #1805321 - CVE-2020-1739 ansible: svn module leaks password when specified as a parameter [fedora-all]
            https://bugzilla.redhat.com/show_bug.cgi?id=1805321
    --------------------------------------------------------------------------------
    
    This update can be installed with the "dnf" update program. Use
    su -c 'dnf upgrade --advisory FEDORA-2020-a3f12bcff4' at the command
    line. For more information, refer to the dnf documentation available at
    https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
    
    All packages are signed with the Fedora Project GPG key. More details on the
    GPG keys used by the Fedora Project can be found at
    https://fedoraproject.org/keys
    --------------------------------------------------------------------------------
    _______________________________________________
    package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it.
    To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.
    Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
    List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
    List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it.
    

    LinuxSecurity Poll

    What do you think of the LinuxSecurity Privacy news articles?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/25-what-do-you-think-of-the-linuxsecurity-privacy-news-articles?task=poll.vote&format=json
    25
    radio
    [{"id":"90","title":"Love them!","votes":"96","type":"x","order":"1","pct":80,"resources":[]},{"id":"91","title":"I'm indifferent","votes":"18","type":"x","order":"2","pct":15,"resources":[]},{"id":"92","title":"Not interested in this topic","votes":"6","type":"x","order":"3","pct":5,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
    bottom 200

    Advisories

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.