From 00f0c06199a1d7870a0068c2a7d47d6a936193a0 Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Mon, 27 Jan 2025 06:25:05 +0100 Subject: [PATCH] Release 8.6.10. --- CHANGELOG.md | 98 +++++++++++-------- CHANGELOG.rst | 13 +++ changelogs/changelog.yaml | 10 ++ changelogs/fragments/8.6.10.yml | 1 - ...ak_client-sanitize-saml-encryption-key.yml | 2 - 5 files changed, 80 insertions(+), 44 deletions(-) delete mode 100644 changelogs/fragments/8.6.10.yml delete mode 100644 changelogs/fragments/9621-keycloak_client-sanitize-saml-encryption-key.yml diff --git a/CHANGELOG.md b/CHANGELOG.md index ee35b22939..6f6284c5db 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,52 +2,55 @@ **Topics** -- v8\.6\.9 +- v8\.6\.10 - Release Summary - Security Fixes -- v8\.6\.8 +- v8\.6\.9 - Release Summary + - Security Fixes +- v8\.6\.8 + - Release Summary - Bugfixes - v8\.6\.7 - - Release Summary + - Release Summary - Bugfixes - v8\.6\.6 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - v8\.6\.5 - - Release Summary + - Release Summary - Bugfixes - v8\.6\.4 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - v8\.6\.3 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - v8\.6\.2 - - Release Summary + - Release Summary - Bugfixes - Known Issues - v8\.6\.1 - - Release Summary - - Security Fixes + - Release Summary + - Security Fixes - Bugfixes - v8\.6\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - Bugfixes - New Modules - v8\.5\.0 - - Release Summary + - Release Summary - Minor Changes - - Security Fixes + - Security Fixes - Bugfixes - New Modules - v8\.4\.0 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - New Plugins @@ -55,13 +58,13 @@ - Filter - New Modules - v8\.3\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - Bugfixes - New Modules - v8\.2\.0 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - New Plugins @@ -70,7 +73,7 @@ - Lookup - New Modules - v8\.1\.0 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - New Plugins @@ -78,13 +81,13 @@ - Test - New Modules - v8\.0\.2 - - Release Summary + - Release Summary - Bugfixes - v8\.0\.1 - - Release Summary + - Release Summary - Bugfixes - v8\.0\.0 - - Release Summary + - Release Summary - Minor Changes - Breaking Changes / Porting Guide - Deprecated Features @@ -96,8 +99,8 @@ - New Modules This changelog describes changes after version 7\.0\.0\. - -## v8\.6\.9 + +## v8\.6\.10 ### Release Summary @@ -107,12 +110,25 @@ Maintenance release with a security fix\. ### Security Fixes +* keycloak\_client \- Sanitize saml\.encryption\.private\.key so it does not show in the logs \([https\://github\.com/ansible\-collections/community\.general/pull/9621](https\://github\.com/ansible\-collections/community\.general/pull/9621)\)\. + + +## v8\.6\.9 + + +### Release Summary + +Maintenance release with a security fix\. + + +### Security Fixes + * keycloak\_authentication \- API calls did not properly set the priority during update resulting in incorrectly sorted authentication flows\. This apparently only affects Keycloak 25 or newer \([https\://github\.com/ansible\-collections/community\.general/pull/9263](https\://github\.com/ansible\-collections/community\.general/pull/9263)\)\. ## v8\.6\.8 - + ### Release Summary Maintenance release for inclusion in Ansible 9\.13\.0\. @@ -125,7 +141,7 @@ Maintenance release for inclusion in Ansible 9\.13\.0\. ## v8\.6\.7 - + ### Release Summary Bugfix release\. @@ -139,7 +155,7 @@ Bugfix release\. ## v8\.6\.6 - + ### Release Summary Regular bugfix release\. @@ -174,7 +190,7 @@ security fixes\. ## v8\.6\.5 - + ### Release Summary Regular bugfix release\. @@ -193,7 +209,7 @@ Regular bugfix release\. ## v8\.6\.4 - + ### Release Summary Regular bugfix release\. @@ -214,7 +230,7 @@ Regular bugfix release\. ## v8\.6\.3 - + ### Release Summary Regular bugfix release\. @@ -235,7 +251,7 @@ Regular bugfix release\. ## v8\.6\.2 - + ### Release Summary Regular bugfix release\. @@ -262,12 +278,12 @@ Regular bugfix release\. ## v8\.6\.1 - + ### Release Summary Regular bugfix release\. - + ### Security Fixes * keycloak\_identity\_provider \- the client secret was not correctly sanitized by the module\. The return values proposed\, existing\, and end\_state\, as well as the diff\, did contain the client secret unmasked \([https\://github\.com/ansible\-collections/community\.general/pull/8355](https\://github\.com/ansible\-collections/community\.general/pull/8355)\)\. @@ -283,7 +299,7 @@ Regular bugfix release\. ## v8\.6\.0 - + ### Release Summary Regular bugfix and features release\. @@ -337,7 +353,7 @@ Regular bugfix and features release\. ## v8\.5\.0 - + ### Release Summary Regular feature and bugfix release with security fixes\. @@ -355,7 +371,7 @@ Regular feature and bugfix release with security fixes\. * proxmox \- adds startup parameters to configure startup order\, startup delay and shutdown delay \([https\://github\.com/ansible\-collections/community\.general/pull/8038](https\://github\.com/ansible\-collections/community\.general/pull/8038)\)\. * revbitspss lookup plugin \- removed a redundant unicode prefix\. The prefix was not necessary for Python 3 and has been cleaned up to streamline the code \([https\://github\.com/ansible\-collections/community\.general/pull/8087](https\://github\.com/ansible\-collections/community\.general/pull/8087)\)\. - + ### Security Fixes * cobbler\, gitlab\_runners\, icinga2\, linode\, lxd\, nmap\, online\, opennebula\, proxmox\, scaleway\, stackpath\_compute\, virtualbox\, and xen\_orchestra inventory plugin \- make sure all data received from the remote servers is marked as unsafe\, so remote code execution by obtaining texts that can be evaluated as templates is not possible \([https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/](https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/)\, [https\://github\.com/ansible\-collections/community\.general/pull/8098](https\://github\.com/ansible\-collections/community\.general/pull/8098)\)\. @@ -382,7 +398,7 @@ Regular feature and bugfix release with security fixes\. ## v8\.4\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -438,7 +454,7 @@ Regular bugfix and feature release\. ## v8\.3\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -485,7 +501,7 @@ Regular bugfix and feature release\. ## v8\.2\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -546,7 +562,7 @@ Regular bugfix and feature release\. ## v8\.1\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -629,7 +645,7 @@ Regular bugfix and feature release\. ## v8\.0\.2 - + ### Release Summary Bugfix release for inclusion in Ansible 9\.0\.0rc1\. @@ -643,7 +659,7 @@ Bugfix release for inclusion in Ansible 9\.0\.0rc1\. ## v8\.0\.1 - + ### Release Summary Bugfix release for inclusion in Ansible 9\.0\.0b1\. @@ -661,7 +677,7 @@ Bugfix release for inclusion in Ansible 9\.0\.0b1\. ## v8\.0\.0 - + ### Release Summary This is release 8\.0\.0 of community\.general\, released on 2023\-11\-01\. diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 69900a32a5..7a67843a6b 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -6,6 +6,19 @@ Community General Release Notes This changelog describes changes after version 7.0.0. +v8.6.10 +======= + +Release Summary +--------------- + +Maintenance release with a security fix. + +Security Fixes +-------------- + +- keycloak_client - Sanitize ``saml.encryption.private.key`` so it does not show in the logs (https://github.com/ansible-collections/community.general/pull/9621). + v8.6.9 ====== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index 21054d5408..63144e240d 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -1685,3 +1685,13 @@ releases: - 8.6.9.yml - 9263-kc_authentication-api-priority.yaml release_date: '2024-12-31' + 8.6.10: + changes: + release_summary: Maintenance release with a security fix. + security_fixes: + - keycloak_client - Sanitize ``saml.encryption.private.key`` so it does not + show in the logs (https://github.com/ansible-collections/community.general/pull/9621). + fragments: + - 8.6.10.yml + - 9621-keycloak_client-sanitize-saml-encryption-key.yml + release_date: '2025-01-27' diff --git a/changelogs/fragments/8.6.10.yml b/changelogs/fragments/8.6.10.yml deleted file mode 100644 index 1a762dd62e..0000000000 --- a/changelogs/fragments/8.6.10.yml +++ /dev/null @@ -1 +0,0 @@ -release_summary: Maintenance release with a security fix. diff --git a/changelogs/fragments/9621-keycloak_client-sanitize-saml-encryption-key.yml b/changelogs/fragments/9621-keycloak_client-sanitize-saml-encryption-key.yml deleted file mode 100644 index 5d3401e430..0000000000 --- a/changelogs/fragments/9621-keycloak_client-sanitize-saml-encryption-key.yml +++ /dev/null @@ -1,2 +0,0 @@ -security_fixes: - - keycloak_client - Sanitize ``saml.encryption.private.key`` so it does not show in the logs (https://github.com/ansible-collections/community.general/pull/9621). \ No newline at end of file