Skip to content

Commit 9749975

Browse files
felixfonteinfelixfontein
committed
Release 2.0.1.
1 parent fa8ce6d commit 9749975

12 files changed

+179
-56
lines changed

‎CHANGELOG.rst‎

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,69 @@ Community General Release Notes
66

77
This changelog describes changes after version 1.0.0.
88

9+
v2.0.1
10+
======
11+
12+
Release Summary
13+
---------------
14+
15+
Bugfix and security bugfix (potential information leaks in multiple modules, CVE-2021-20191) release.
16+
17+
Major Changes
18+
-------------
19+
20+
- For community.general 3.0.0, the ``ome_device_info``, ``idrac_firmware`` and ``idrac_server_config_profile`` modules will be moved to the `dellemc.openmanage <https://galaxy.ansible.com/dellemc/openmanage>`_ collection.
21+
A redirection will be inserted so that users using ansible-base 2.10 or newer do not have to change anything.
22+
23+
If you use Ansible 2.9 and explicitly use the DellEMC modules mentioned above from this collection, you will need to adjust your playbooks and roles to use FQCNs starting with ``dellemc.openmanage.`` instead of ``community.general.``,
24+
for example replace ``community.general.ome_device_info`` in a task by ``dellemc.openmanage.ome_device_info``.
25+
26+
If you use ansible-base and installed ``community.general`` manually and rely on the DellEMC modules mentioned above, you have to make sure to install the ``dellemc.openmanage`` collection as well.
27+
If you are using FQCNs, for example ``community.general.ome_device_info`` instead of ``ome_device_info``, it will continue working, but we still recommend to adjust the FQCNs as well.
28+
29+
Breaking Changes / Porting Guide
30+
--------------------------------
31+
32+
- utm_proxy_auth_profile - the ``frontend_cookie_secret`` return value now contains a placeholder string instead of the module's ``frontend_cookie_secret`` parameter (https://github.com/ansible-collections/community.general/pull/1736).
33+
34+
Security Fixes
35+
--------------
36+
37+
- dnsmadeeasy - mark the ``account_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
38+
- gitlab_runner - mark the ``registration_token`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
39+
- hwc_ecs_instance - mark the ``admin_pass`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
40+
- ibm_sa_host - mark the ``iscsi_chap_secret`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
41+
- keycloak_* modules - mark the ``auth_client_secret`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
42+
- keycloak_client - mark the ``registration_access_token`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
43+
- librato_annotation - mark the ``api_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
44+
- logentries_msg - mark the ``token`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
45+
- module_utils/_netapp, na_ontap_gather_facts - enabled ``no_log`` for the options ``api_key`` and ``secret_key`` to prevent accidental disclosure (CVE-2021-20191, https://github.com/ansible-collections/community.general/pull/1725).
46+
- module_utils/identity/keycloak, keycloak_client, keycloak_clienttemplate, keycloak_group - enabled ``no_log`` for the option ``auth_client_secret`` to prevent accidental disclosure (CVE-2021-20191, https://github.com/ansible-collections/community.general/pull/1725).
47+
- nios_nsgroup - mark the ``tsig_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
48+
- oneandone_firewall_policy, oneandone_load_balancer, oneandone_monitoring_policy, oneandone_private_network, oneandone_public_ip - mark the ``auth_token`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
49+
- ovirt - mark the ``instance_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
50+
- ovirt - mark the ``instance_rootpw`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
51+
- pagerduty_alert - mark the ``api_key``, ``service_key`` and ``integration_key`` parameters as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
52+
- pagerduty_change - mark the ``integration_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
53+
- pingdom - mark the ``key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
54+
- pulp_repo - mark the ``feed_client_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
55+
- rax_clb_ssl - mark the ``private_key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
56+
- redfish_command - mark the ``update_creds.password`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
57+
- rollbar_deployment - mark the ``token`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
58+
- spotinst_aws_elastigroup - mark the ``multai_token`` and ``token`` parameters as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
59+
- stackdriver - mark the ``key`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
60+
- utm_proxy_auth_profile - enabled ``no_log`` for the option ``frontend_cookie_secret`` to prevent accidental disclosure (CVE-2021-20191, https://github.com/ansible-collections/community.general/pull/1725).
61+
- utm_proxy_auth_profile - mark the ``frontend_cookie_secret`` parameter as ``no_log`` to avoid leakage of secrets. This causes the ``utm_proxy_auth_profile`` return value to no longer containing the correct value, but a placeholder (https://github.com/ansible-collections/community.general/pull/1736).
62+
63+
Bugfixes
64+
--------
65+
66+
- filesystem - do not fail when ``resizefs=yes`` and ``fstype=xfs`` if there is nothing to do, even if the filesystem is not mounted. This only covers systems supporting access to unmounted XFS filesystems. Others will still fail (https://github.com/ansible-collections/community.general/issues/1457, https://github.com/ansible-collections/community.general/pull/1478).
67+
- gitlab_user - make updates to the ``isadmin``, ``password`` and ``confirm`` options of an already existing GitLab user work (https://github.com/ansible-collections/community.general/pull/1724).
68+
- parted - change the regex that decodes the partition size to better support different formats that parted uses. Change the regex that validates parted's version string (https://github.com/ansible-collections/community.general/pull/1695).
69+
- redfish_info module, redfish_utils module utils - add ``Name`` and ``Id`` properties to output of Redfish inventory commands (https://github.com/ansible-collections/community.general/issues/1650).
70+
- sensu-silence module - fix json parsing of sensu API responses on Python 3.5 (https://github.com/ansible-collections/community.general/pull/1703).
71+
972
v2.0.0
1073
======
1174

‎changelogs/changelog.yaml‎

Lines changed: 115 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1000,3 +1000,118 @@ releases:
10001000
name: yum_versionlock
10011001
namespace: packaging.os
10021002
release_date: '2021-01-28'
1003+
2.0.1:
1004+
changes:
1005+
breaking_changes:
1006+
- utm_proxy_auth_profile - the ``frontend_cookie_secret`` return value now contains
1007+
a placeholder string instead of the module's ``frontend_cookie_secret`` parameter
1008+
(https://github.com/ansible-collections/community.general/pull/1736).
1009+
bugfixes:
1010+
- filesystem - do not fail when ``resizefs=yes`` and ``fstype=xfs`` if there
1011+
is nothing to do, even if the filesystem is not mounted. This only covers
1012+
systems supporting access to unmounted XFS filesystems. Others will still
1013+
fail (https://github.com/ansible-collections/community.general/issues/1457,
1014+
https://github.com/ansible-collections/community.general/pull/1478).
1015+
- gitlab_user - make updates to the ``isadmin``, ``password`` and ``confirm``
1016+
options of an already existing GitLab user work (https://github.com/ansible-collections/community.general/pull/1724).
1017+
- parted - change the regex that decodes the partition size to better support
1018+
different formats that parted uses. Change the regex that validates parted's
1019+
version string (https://github.com/ansible-collections/community.general/pull/1695).
1020+
- redfish_info module, redfish_utils module utils - add ``Name`` and ``Id``
1021+
properties to output of Redfish inventory commands (https://github.com/ansible-collections/community.general/issues/1650).
1022+
- sensu-silence module - fix json parsing of sensu API responses on Python 3.5
1023+
(https://github.com/ansible-collections/community.general/pull/1703).
1024+
major_changes:
1025+
- 'For community.general 3.0.0, the ``ome_device_info``, ``idrac_firmware``
1026+
and ``idrac_server_config_profile`` modules will be moved to the `dellemc.openmanage
1027+
<https://galaxy.ansible.com/dellemc/openmanage>`_ collection.
1028+
1029+
A redirection will be inserted so that users using ansible-base 2.10 or newer
1030+
do not have to change anything.
1031+
1032+
1033+
If you use Ansible 2.9 and explicitly use the DellEMC modules mentioned above
1034+
from this collection, you will need to adjust your playbooks and roles to
1035+
use FQCNs starting with ``dellemc.openmanage.`` instead of ``community.general.``,
1036+
1037+
for example replace ``community.general.ome_device_info`` in a task by ``dellemc.openmanage.ome_device_info``.
1038+
1039+
1040+
If you use ansible-base and installed ``community.general`` manually and rely
1041+
on the DellEMC modules mentioned above, you have to make sure to install the
1042+
``dellemc.openmanage`` collection as well.
1043+
1044+
If you are using FQCNs, for example ``community.general.ome_device_info``
1045+
instead of ``ome_device_info``, it will continue working, but we still recommend
1046+
to adjust the FQCNs as well.
1047+
1048+
'
1049+
release_summary: Bugfix and security bugfix (potential information leaks in
1050+
multiple modules, CVE-2021-20191) release.
1051+
security_fixes:
1052+
- dnsmadeeasy - mark the ``account_key`` parameter as ``no_log`` to avoid leakage
1053+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1054+
- gitlab_runner - mark the ``registration_token`` parameter as ``no_log`` to
1055+
avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1056+
- hwc_ecs_instance - mark the ``admin_pass`` parameter as ``no_log`` to avoid
1057+
leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1058+
- ibm_sa_host - mark the ``iscsi_chap_secret`` parameter as ``no_log`` to avoid
1059+
leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1060+
- keycloak_* modules - mark the ``auth_client_secret`` parameter as ``no_log``
1061+
to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1062+
- keycloak_client - mark the ``registration_access_token`` parameter as ``no_log``
1063+
to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1064+
- librato_annotation - mark the ``api_key`` parameter as ``no_log`` to avoid
1065+
leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1066+
- logentries_msg - mark the ``token`` parameter as ``no_log`` to avoid leakage
1067+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1068+
- module_utils/_netapp, na_ontap_gather_facts - enabled ``no_log`` for the options
1069+
``api_key`` and ``secret_key`` to prevent accidental disclosure (CVE-2021-20191,
1070+
https://github.com/ansible-collections/community.general/pull/1725).
1071+
- module_utils/identity/keycloak, keycloak_client, keycloak_clienttemplate,
1072+
keycloak_group - enabled ``no_log`` for the option ``auth_client_secret``
1073+
to prevent accidental disclosure (CVE-2021-20191, https://github.com/ansible-collections/community.general/pull/1725).
1074+
- nios_nsgroup - mark the ``tsig_key`` parameter as ``no_log`` to avoid leakage
1075+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1076+
- oneandone_firewall_policy, oneandone_load_balancer, oneandone_monitoring_policy,
1077+
oneandone_private_network, oneandone_public_ip - mark the ``auth_token`` parameter
1078+
as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1079+
- ovirt - mark the ``instance_key`` parameter as ``no_log`` to avoid leakage
1080+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1081+
- ovirt - mark the ``instance_rootpw`` parameter as ``no_log`` to avoid leakage
1082+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1083+
- pagerduty_alert - mark the ``api_key``, ``service_key`` and ``integration_key``
1084+
parameters as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1085+
- pagerduty_change - mark the ``integration_key`` parameter as ``no_log`` to
1086+
avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1087+
- pingdom - mark the ``key`` parameter as ``no_log`` to avoid leakage of secrets
1088+
(https://github.com/ansible-collections/community.general/pull/1736).
1089+
- pulp_repo - mark the ``feed_client_key`` parameter as ``no_log`` to avoid
1090+
leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1091+
- rax_clb_ssl - mark the ``private_key`` parameter as ``no_log`` to avoid leakage
1092+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1093+
- redfish_command - mark the ``update_creds.password`` parameter as ``no_log``
1094+
to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1095+
- rollbar_deployment - mark the ``token`` parameter as ``no_log`` to avoid leakage
1096+
of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1097+
- spotinst_aws_elastigroup - mark the ``multai_token`` and ``token`` parameters
1098+
as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/1736).
1099+
- stackdriver - mark the ``key`` parameter as ``no_log`` to avoid leakage of
1100+
secrets (https://github.com/ansible-collections/community.general/pull/1736).
1101+
- utm_proxy_auth_profile - enabled ``no_log`` for the option ``frontend_cookie_secret``
1102+
to prevent accidental disclosure (CVE-2021-20191, https://github.com/ansible-collections/community.general/pull/1725).
1103+
- utm_proxy_auth_profile - mark the ``frontend_cookie_secret`` parameter as
1104+
``no_log`` to avoid leakage of secrets. This causes the ``utm_proxy_auth_profile``
1105+
return value to no longer containing the correct value, but a placeholder
1106+
(https://github.com/ansible-collections/community.general/pull/1736).
1107+
fragments:
1108+
- 1478-filesystem-fix-1457-resizefs-idempotency.yml
1109+
- 1691-add-name-and-id-props-to-redfish-inventory-output.yml
1110+
- 1695-parted-updatedregex.yaml
1111+
- 1703-sensu_silence-fix_json_parsing.yml
1112+
- 1724-various-fixes-for-updating-existing-gitlab-user.yml
1113+
- 2.0.1.yml
1114+
- CVE-2021-20191_no_log.yml
1115+
- dellemc-migration.yml
1116+
- no_log-fixes.yml
1117+
release_date: '2021-02-09'

‎changelogs/fragments/1478-filesystem-fix-1457-resizefs-idempotency.yml‎

Lines changed: 0 additions & 5 deletions
This file was deleted.

‎changelogs/fragments/1691-add-name-and-id-props-to-redfish-inventory-output.yml‎

Lines changed: 0 additions & 2 deletions
This file was deleted.

‎changelogs/fragments/1695-parted-updatedregex.yaml‎

Lines changed: 0 additions & 4 deletions
This file was deleted.

‎changelogs/fragments/1703-sensu_silence-fix_json_parsing.yml‎

Lines changed: 0 additions & 2 deletions
This file was deleted.

‎changelogs/fragments/1724-various-fixes-for-updating-existing-gitlab-user.yml‎

Lines changed: 0 additions & 2 deletions
This file was deleted.

‎changelogs/fragments/2.0.1.yml‎

Lines changed: 0 additions & 1 deletion
This file was deleted.

‎changelogs/fragments/CVE-2021-20191_no_log.yml‎

Lines changed: 0 additions & 4 deletions
This file was deleted.

‎changelogs/fragments/dellemc-migration.yml‎

Lines changed: 0 additions & 10 deletions
This file was deleted.

0 commit comments

Comments
 (0)