Hello community, here is the log from the commit of package ansible for openSUSE:Factory checked in at 2020-08-13 10:17:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ansible (Old) and /work/SRC/openSUSE:Factory/.ansible.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ansible" Thu Aug 13 10:17:21 2020 rev:69 rq:826038 version:2.9.12 Changes: -------- --- /work/SRC/openSUSE:Factory/ansible/ansible.changes 2020-07-27 17:45:45.055301231 +0200 +++ /work/SRC/openSUSE:Factory/.ansible.new.3399/ansible.changes 2020-08-13 10:20:35.778817139 +0200 @@ -1,0 +2,25 @@ +Wed Aug 12 12:44:52 UTC 2020 - Michael Ströder <mich...@stroeder.com> + +- added fix-cron-regression-71207.patch + +------------------------------------------------------------------- +Tue Aug 11 05:09:36 UTC 2020 - Michael Ströder <mich...@stroeder.com> + +- update to version 2.9.12 with many bug fixes, + most notably the following security fixes: + * security issue - copy - Redact the value of the no_log 'content' + parameter in the result's invocation.module_args in check mode. + Previously when used with check mode and with '-vvv', the module would + not censor the content if a change would be made to the destination path. + (CVE-2020-14332) + * security issue atomic_move - change default permissions when creating + temporary files so they are not world readable + (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736) + * Fix warning for default permission change when no mode is specified. + Follow up to https://github.com/ansible/ansible/issues/67794. + (CVE-2020-1736) + * Sanitize no_log values from any response keys that might be returned + from the uri module (CVE-2020-14330). + * reset logging level to INFO due to CVE-2019-14846. + +------------------------------------------------------------------- Old: ---- ansible-2.9.11.tar.gz ansible-2.9.11.tar.gz.sha New: ---- ansible-2.9.12.tar.gz ansible-2.9.12.tar.gz.sha fix-cron-regression-71207.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ansible.spec ++++++ --- /var/tmp/diff_new_pack.7tN5Wx/_old 2020-08-13 10:20:41.474819479 +0200 +++ /var/tmp/diff_new_pack.7tN5Wx/_new 2020-08-13 10:20:41.478819480 +0200 @@ -220,7 +220,7 @@ Recommends: sshpass %endif Name: ansible -Version: 2.9.11 +Version: 2.9.12 Release: 0 Summary: SSH-based configuration management, deployment, and task execution system License: GPL-3.0-or-later @@ -229,6 +229,7 @@ Source: https://releases.ansible.com/ansible/ansible-%{version}.tar.gz Source1: https://releases.ansible.com/ansible/ansible-%{version}.tar.gz.sha Source99: ansible-rpmlintrc +Patch1: fix-cron-regression-71207.patch BuildArch: noarch # extented documentation %if 0%{?with_docs} @@ -288,6 +289,7 @@ %prep %setup -q -n ansible-%{version} +%patch1 -p1 for file in .git_keep .travis.yml ; do find . -name "$file" -delete ++++++ ansible-2.9.11.tar.gz -> ansible-2.9.12.tar.gz ++++++ /work/SRC/openSUSE:Factory/ansible/ansible-2.9.11.tar.gz /work/SRC/openSUSE:Factory/.ansible.new.3399/ansible-2.9.12.tar.gz differ: char 5, line 1 ++++++ ansible-2.9.11.tar.gz.sha -> ansible-2.9.12.tar.gz.sha ++++++ --- /work/SRC/openSUSE:Factory/ansible/ansible-2.9.11.tar.gz.sha 2020-07-27 17:45:42.731299049 +0200 +++ /work/SRC/openSUSE:Factory/.ansible.new.3399/ansible-2.9.12.tar.gz.sha 2020-08-13 10:20:32.702815876 +0200 @@ -1 +1 @@ -88f9d033ece7fd51eca3abb4f02e13b63c924b97f9705a997d5a711c0cf42ab1 ansible-2.9.11.tar.gz +7e95ddf719190b068fafc7d7c7877c218054cc5da4f6d9d794faf7bc66dab774 ansible-2.9.12.tar.gz ++++++ fix-cron-regression-71207.patch ++++++ diff -ur ansible-2.9.12.orig/lib/ansible/modules/system/cron.py ansible-2.9.12/lib/ansible/modules/system/cron.py --- ansible-2.9.12.orig/lib/ansible/modules/system/cron.py 2020-08-11 05:22:08.000000000 +0200 +++ ansible-2.9.12/lib/ansible/modules/system/cron.py 2020-08-12 14:42:34.519669206 +0200 @@ -258,6 +258,7 @@ try: f = open(self.b_cron_file, 'rb') self.n_existing = to_native(f.read(), errors='surrogate_or_strict') + self.lines = self.n_existing.splitlines() f.close() except IOError: # cron file does not exist
