# changelog

author: Toshio Kuratomi <toshio@fedoraproject.org> - - 2.7.13-1
changelog:
  - Ansible 2.7.13 upstream release
  - Fixes CVE-2019-10206 - Ansible discloses data when prompted for password
    which contains template characters


author: tkuratom@redhat.com - 2.8.0-0.6.b1
changelog:
  - Simplify spec file as we're building only for Python2 on RHEL7.
  - Remove unnecessary setuptools runtime dep and httplib2 dep.
  - Drop the rolespath patch as the default configuration upstream includes that.


author: tkuratom@redhat.com - 2.8.0-0.8.rc1
changelog:
  - Update to rc1
  - Restore distro test
  - Check that the list of upstream datadir locations has not changed


author: Toshio Kuratomi <tkuratom@redhat.com> - 2.8.4-1
changelog:
  - Upstream 2.8.4 release
  - Fixes CVE-2019-10206 - Ansible disclosures data when prompted for password
    which contains template characters
  - Fixes CVE-2019-10217 - Ansible: gcp modules do not flag sensitive data fields
    properly


author: Toshio Kuratomi <tkuratom@redhat.com> - 2.8.5-2
changelog:
  - Remove the -s from the python shebang line.  Ansible has many optional
    components which require users to install third party libraries to use.  -s
    prevents users from doing that easily.


author: Toshio Kuratomi <tkuratom@redhat.com> - 2.8.6-1
changelog:
  - Ansible 2.6.20 upstream release.  Notable fixes:
    - CVE-2019-14846 - credentials appear in logs even with no_log set
    - CVE-2019-14858 - sub parameters marked as no_log are not masked in certain failure scenarios
    - CVE-2019-14856 - Incomplete fix for CVE-2019-10206, disclosure of data when
      prompted for password and template characters are passed


author: Toshio Kuratomi <tkuratom@redhat.com> - 2.9.0-2
changelog:
  - Exclude ansible-test script from the main ansible package.  It should only
    be in the ansible-test subpackage.


author: Toshio Kuratomi <tkuratom@redhat.com> - 2.9.0-0.8.20191017rc4
changelog:
  - Ansible 2.9.0rc4 upstream release.  Notable fixes:
    - CVE-2019-14858 - sub parameters marked as no_log are not masked in certain failure scenarios
    - CVE-2019-14856 - Incomplete fix for CVE-2019-10206, disclosure of data when
      prompted for password and template characters are passed


