You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible/changelogs/fragments
Matt Davis 23f8639a4b
[stable-2.18] Preserve `_ansible_no_log` from action result; fix `include_vars` to set properly (#84143) (#84179)
* fixes for CVE-2024-8775

* propagate truthy `_ansible_no_log` in action result (previously superseded by task-calculated value)
* always mask entire `include_vars` action result if any file loaded had a false `show_content` flag (previously used only the flag value from the last file loaded)

* update no_log tests for CVE-2024-8775
* include validation of _ansible_no_log preservation when set by actions
* replace static values with dynamic for increased robustness to logging/display/callback changes (but still using grep counts :( )

* changelog

* use ternary, coerce to bool explicitly
(cherry picked from commit c9ac477e53)
4 weeks ago
..
2.18.0b1_summary.yaml New release v2.18.0b1 (#84004) 2 months ago
2.18.0rc1_summary.yaml New release v2.18.0rc1 (#84122) 1 month ago
42960_vault_password.yml
46314.yml apt: Report change when package is removed (#83547) 4 months ago
46742-atomic_move-fix-setgid.yml atomic_move - fix creating file in directory with setgid bit (#83718) 4 months ago
62151-loop_control-until.yml loop_control "early exit" feature (#62151) 3 months ago
64092-get_url_verify_tmpsrc_checksum.yml
72321_git.yml
81770-add-uid-guid-minmax-keys.yml Add UID and GID min/max keys (#81770) 4 months ago
82075.yml
82307-handlers-lockstep-linear-fix.yml
82490_creating_user_dir_using_tilde_always_reports_changed.yml Fix Creating user directory using tilde always reports "changed" (#83113) 5 months ago
82535-properly-quote-shell.yml
82671-ansible-doc-role-examples.yml
82708-unsafe-plugin-name-error.yml [stable-2.18] forward ports of unsafe persistence fixes (#83922) 2 months ago
82831_countme_yum_repository.yml
82878-fetch-dest-is-dir.yml
82941.yml
82946.yml
82947.yml
83019-linear-handlers-lockstep-fix.yml linear: fix included handlers executing in lockstep (#83209) 5 months ago
83031.yml
83155-ansible-doc-paragraphs.yml
83235-copy-module-update-mtime.yml fix copy module update atime/mtime (#83235) 3 months ago
83294-meta-host_pinned-affinity.yml Fix meta tasks breaking host/fork affinity with host_pinned (#83438) 4 months ago
83327.yml
83331.yml
83373-dnf5-wildcard.yml dnf, dnf5: fix installing via wildcard (#83481) 5 months ago
83392-fix-memory-issues-handlers.yml
83406-dnf-fix-arch-cmp.yml dnf - arches must be the same in the is_newer_installed check (#83417) 5 months ago
83447-end_host-rescue-rc.yml Fix incorrect rc when executing end_host in rescue (#83522) 5 months ago
83457-service_facts-openbsd-dont-crash-in-equals.yml
83469-http-test-container.yml
83480-fix-support-discard.yml facts/hardware: Fix support_discard block device fact (#83480) 5 months ago
83498-command-tb-env.yml Fix tb for when env var contains % (#83499) 5 months ago
83508_mount_facts.yml Add mount_facts module (#83508) 2 months ago
83530-validate-modules-casing.yml validate-modules: reject option/alias names equal up to casing belonging to different options (#83530) 5 months ago
83540-update_disto_version.yml Typo fixes and other bits and bobs (#83672) 4 months ago
83541-add-sl-micro-suse-family.yaml Add SL-Micro to Suse family list (#83541) 5 months ago
83575-fix-sanity-ignore-for-find.yml remove ignore clauses for module find (#83575) 4 months ago
83599-validate-modules-aliases.yml validate-modules: detect names set mismatch between argument spec and documentation (#83599) 4 months ago
83601-debconf-normalize-bools.yml debconf: handle boolean value representation consistently (#83601) 4 months ago
83619-loop-label-register.yml Ensure skipped loop iteration register var is available (#83756) 4 months ago
83716-enable-subkey-fingerprint-validation-in-rpm-key-module.yml Enable validation of subkeys in rpm key module (#83716) 4 months ago
83755-ini-new-interpolation-option.yml ini lookup: add new interpolation option (#83773) 4 months ago
83803-collection-import-poll-interval.yml galaxy-cli tasking polling interval from environment variable (#83803) 3 months ago
83831-runtime-metadata-fix.yml runtime-metadata sanity test: do not fail deprecation version checks if galaxy.yml has empty `version` (#83831) 3 months ago
83874-include-parse-error-location.yml Add location on include_tasks fail inside include (#83876) 3 months ago
83960-dnf5-state-installed-fix.yml dnf5: re-introduce ``state: installed`` alias (#83961) 2 months ago
PowerShell-AddType-temp.yml
action-plugin-docs-sidecar.yml
add_systemd_facts.yml
ansible-config-validate.yml
ansible-doc-color.yml
ansible-doc-inicate.yml
ansible-doc.yml ansible-doc: handle on_fail (#83676) 4 months ago
ansible-drop-python-3.7.yml
ansible-galaxy-install-archive-url-timeout.yml increase timeout downloading galaxy role URLs (#83562) 4 months ago
ansible-galaxy-install-help.yml Clarify galaxy CLI --help about install locations (#83919) 2 months ago
ansible-galaxy-role-install-symlink.yml
ansible-test-container-update.yml
ansible-test-coverage-update.yml ansible-test - Update coverage to 7.6.1 (#83723) 4 months ago
ansible-test-error-message-improvement.yml ansible-test - Improve unknown env error message (#83610) 4 months ago
ansible-test-http-test-container-update.yml
ansible-test-nios-container.yml ansible-test - Update nios-test-container to 5.0.0 3 months ago
ansible-test-no-egg-info.yml ansible-test - Remove generation of egg-info (#83786) 3 months ago
ansible-test-platform-updates.yml Enable Ubuntu 24.04 group 6 in CI (#83466) 5 months ago
ansible-test-probe-error-handling.yml [stable-2.18] ansible-test - Improve container probe error handling (#84109) (#84110) 2 months ago
ansible-test-pylint-fix.yml [stable-2.18] ansible-test - Work around pylint issue on 3.11 (#84094) (#84096) 2 months ago
ansible-test-pylint-py-version.yml ansible-test - Use Python version in pylint contexts (#83984) 2 months ago
ansible-test-pypi-test-container-update.yml
ansible-test-sanity-empty-init.yml ansible-test - Reduce scope of empty-init test (#83878) 3 months ago
ansible-test-sanity-test-requirements.yml ansible-test - Update venv management and sanity requirements (#83729) 4 months ago
ansible-test-update.yml ansible-test - Update base/default containers (#84090) 2 months ago
ansible-test-utility-container-update.yml
ansible-test-venv-bootstrap.yml ansible-test - Update venv management and sanity requirements (#83729) 4 months ago
ansible-test-vyos.yml ansible-test - Remove VyOS tests and support files (#83650) 4 months ago
ansible-test-windows-remote.yml ansible-test - Add Windows remote connection option 3 months ago
ansible_connection_path.yml
ansible_managed_restore.yml
apk_package_facts.yml
apt_cache.yml
assemble.yml
atomic_update_perms_time.yml copy, fix permissions and atime on diff partitions (#83824) 3 months ago
become-runas-system.yml runas - create new SYTEM token for become (#83827) 2 months ago
cleanup-outdated-galaxy-install-info.yml
colors_for_included_events.yml fix: `COLOR_INCLUDED` to colorize `included` output (#83711) 4 months ago
config_init_fix.yml
correct-callback-fqcn-old-style-action-invocation.yml
correct_connection_callback.yml Ensure the correct connection name is shown in results (#83354) 5 months ago
cve-2023-5764.yml [stable-2.18] forward ports of unsafe persistence fixes (#83922) 2 months ago
cve-2024-8775.yml [stable-2.18] Preserve `_ansible_no_log` from action result; fix `include_vars` to set properly (#84143) (#84179) 4 weeks ago
darwin_facts.yml
debconf_empty_password.yml [stable-2.18] debconf: set empty password value (#84033) 1 month ago
delay_type.yml delay keyword changed from int to float (#83901) 3 months ago
deprecate-safe-evals.yml Deprecate remaining safe evals (#83293) 4 months ago
dinit.yml Add dinit as a service_mgr (#83489) 5 months ago
display_fix_log_severity.yml Fix display to log severity mapping (#83712) 4 months ago
dnf-exceptions-vs-text.yml dnf: stop filtering exceptions by matching on text (#83297) 3 months ago
dnf-installroot-substitutions.yml
dnf-remove-legacy-code.yml dnf: remove legacy code (#83298) 5 months ago
dnf5-api-breaks.yml
dnf5-enable-disable-plugins.yml
dnf5-plugins-compat.yml dnf5: fix tb when plugins API is not available (#83969) (#83991) 2 months ago
dnf_cache_path.yml
dnf_handle_downloaderror.yml Ensure that we are handling DownloadError properly in the dnf module (#83543) 5 months ago
dwim_is_role_fix_task_relative.yml Fix task-adjacent search path in roles (#83621) 4 months ago
empty_log_path.yml display: warn user about empty log path value (#83381) 4 months ago
enabled_runtime.yml
end_role.yml Add end_role meta task (#83263) 4 months ago
extras_fix.yml connection plugins: extras fix (#83353) 3 months ago
fetch-filename.yml ssh and psrp - Support more complex characters in fetch_file (#83753) 3 months ago
file_hardlink.yml
fix-ansible-galaxy-ignore-certs.yml ansible-galaxy - fix ignoring certs when installing from git repos (#83332) (#84070) 1 month ago
fix-inconsistent-csvfile-missing-search-error.yml csvfile lookup - fix giving an error when no search term is provided (#83710) 4 months ago
fix-module-defaults-deprecations.yml fix module_defaults group incorrectly giving deprecation warnings (#83510) 4 months ago
fix-module-utils-facts-timeout.yml Fix error message given by ansible.module_utils.facts.timeout.timeout (#83945) (#84068) 1 month ago
fix_errors.yml Ansible Errors, Don't hide stacked messages when yaml (#83933) (#84000) 2 months ago
fix_floating_ints.yml Do not convert floats to ints when there is truncation (#83864) 2 months ago
fix_log_verbosity.yml
freebsd_disk_regex.yml
freebsd_facts_refactor.yml
freebsd_service.yml
galaxy-reauth-error-handling.yml Handle authentication errors and token expiration (#83695) 3 months ago
gather-s390-sysinfo.yml
gather_facts_single.yml Gather mount facts, fallback for when multiproc is not feasable (#83750) 3 months ago
getoffmylawn.yml actually show plugin config warnings/deprecations (#82593) 5 months ago
hostvars_fix.yml hostvars templating fix, override serialization (#83509) 5 months ago
isidentifier.yml isidentifier: Remove Python 2 specific code (#83688) 2 months ago
known_hosts_module_args.yml known_hosts: don't modify `AnsibleModule.params` (#83517) 5 months ago
language.yml Set LANGUAGE env variable is set to a non-English locale (#83671) 4 months ago
linear_started_name.yml linear strategy, show templated task name on start (#83473) 5 months ago
linux_network_get.yml Remove extraneous get_bin_path call (#83675) 4 months ago
listify.yml
local_facts_d.yml add error handling when parsing values in ini files (#82718) 4 months ago
mask_me.yml
mc_fix.yml module compression is now again settable via var (#83573) 5 months ago
os_family.yml [stable-2.18] facts: Skip path if the distribution path is directory (#84036) 1 month ago
package-dnf-action-plugins-facts-fail-msg.yml package/dnf action plugins: better facts failure msg (#83995) (#84013) 2 months ago
package_facts_aliases.yml
package_facts_warnings.yml package_facts: fix warning logic (#83520) 5 months ago
powershell-clixml.yml powershell - Improve CLIXML parsing (#83847) 3 months ago
psrp-extras.yml psrp - Remove extras lookups (#83760) 3 months ago
psrp-version-req.yml
python-3.13.yml
raw_clean_msg.yml core: raw params better error msg (#83726) 4 months ago
remove-deprecated-gather-facts-config.yml
remove-deprecated-get_delegated_vars.yml
remove-deprecated-role-cache.yml
remove-deprecated-vars-syntax.yml
remove-python-2-compat.yml
remove-python3.10-controller-support.yml
replace_regex.yml
secrets.yml Replace random with secrets (#83668) 4 months ago
selinux_import.yml Remove selinux import (#83674) 4 months ago
service_facts_systemd_fix.yml service_facts, fix systemd/ubuntu failed reporting (#83424) 3 months ago
shell-environment.yml Remove explicit shell environment docs (#83649) 4 months ago
skip-implicit-flush_handlers-no-notify.yml Reduce number of implicit meta tasks (#84007) (#84044) 1 month ago
ssh-windows.yml Improve testing for Windows SSH and other connection plugins (#83834) 3 months ago
suppress-paramiko-warnings.yml Suppress cryptography warnings for paramiko (#83772) 4 months ago
sysctl_fact_fix.yml
systemd_facts.yml systemd facts: Handle AttributeError (#83684) 4 months ago
timedout_test.yml timedout extended (#83953) 2 months ago
timeout_show_frame.yml
unarchive_differs.yml unarchive: handle content and size differences (#83454) 5 months ago
unarchive_timestamp.yml
unsafe-fixes-2.yml [stable-2.18] forward ports of unsafe persistence fixes (#83922) 2 months ago
unsafe-intern.yml [stable-2.18] forward ports of unsafe persistence fixes (#83922) 2 months ago
uri_follow_redirect.yml
user_action_fix.yml user module, avoid chmoding symlink'd home file (#83956) (#84080) 1 month ago
user_ssh_fix.yml user module avoid conflicts ssh pub key (#84165) (#84171) 4 weeks ago
v2.18.0-initial-commit.yaml
vaulted_file_and_fixes.yml Add vaulted_file test (#83717) 4 months ago
vmware_facts.yml
winrm-quota.yml winrm - quota retry handling (#83656) 4 months ago
yum_repository.yml