Accepting request 742224 from home:abergmann:branches:systemsmanagement

Security Update to version 2.8.6.

OBS-URL: https://build.opensuse.org/request/show/742224
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=149

ansible-2.8.5.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8e9403e755ce8ef27b6066cdd7a4c567aa80ebe2fd90d0ff8efa0a725d246986
-size 14352036

ansible-2.8.5.tar.gz.sha

@@ -1 +0,0 @@
-8e9403e755ce8ef27b6066cdd7a4c567aa80ebe2fd90d0ff8efa0a725d246986  ansible-2.8.5.tar.gz

ansible-2.8.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:31203b27c9d61123e8c86b6eb5116a21859ed4f26d55a1a71eaf27bd92bce355
+size 12689211

ansible-2.8.6.tar.gz.sha

@@ -0,0 +1 @@
+31203b27c9d61123e8c86b6eb5116a21859ed4f26d55a1a71eaf27bd92bce355  ansible-2.8.6.tar.gz

ansible.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Oct 23 16:10:41 UTC 2019 -  <abergmann@suse.com>
+
+- Update to version 2.8.6:
+  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
+  and also available online at
+  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
+  Included security fixes:
+  * CVE-2019-14846: Fixed secrets disclosure on logs due to display is hardcoded
+    to DEBUG level (bsc#1153452)
+  * CVE-2019-14856: Fixed insufficient fix for CVE-2019-10206 (bsc#1154232)
+  * CVE-2019-14858: Fixed data in the sub parameter fields that will not be masked
+    and will be displayed when run with increased verbosity (bsc#1154231) 
+
 -------------------------------------------------------------------
 Fri Sep 13 09:02:36 UTC 2019 - Lars Vogdt <lars@linux-schulserver.de>
 

ansible.spec

@@ -36,7 +36,7 @@
 BuildArch:      noarch
 %endif
 Name:           ansible
-Version:        2.8.5
+Version:        2.8.6
 Release:        0
 Summary:        Software automation engine
 License:        GPL-3.0-or-later