From 7f4e224aa55aa9f5464b77517de5945d2b400a81 Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Tue, 31 Dec 2024 11:49:57 +0100 Subject: [PATCH] Release 8.6.9. --- CHANGELOG.md | 92 +++++++++++-------- CHANGELOG.rst | 13 +++ changelogs/changelog.yaml | 11 +++ changelogs/fragments/8.6.9.yml | 1 - .../9263-kc_authentication-api-priority.yaml | 2 - 5 files changed, 78 insertions(+), 41 deletions(-) delete mode 100644 changelogs/fragments/8.6.9.yml delete mode 100644 changelogs/fragments/9263-kc_authentication-api-priority.yaml diff --git a/CHANGELOG.md b/CHANGELOG.md index 67e57d6b97..ee35b22939 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,49 +2,52 @@ **Topics** -- v8\.6\.8 +- v8\.6\.9 - Release Summary + - Security Fixes +- v8\.6\.8 + - Release Summary - Bugfixes - v8\.6\.7 - - Release Summary + - Release Summary - Bugfixes - v8\.6\.6 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - v8\.6\.5 - - Release Summary + - Release Summary - Bugfixes - v8\.6\.4 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - v8\.6\.3 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - v8\.6\.2 - - Release Summary + - Release Summary - Bugfixes - Known Issues - v8\.6\.1 - - Release Summary - - Security Fixes + - Release Summary + - Security Fixes - Bugfixes - v8\.6\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - Bugfixes - New Modules - v8\.5\.0 - - Release Summary + - Release Summary - Minor Changes - - Security Fixes + - Security Fixes - Bugfixes - New Modules - v8\.4\.0 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - New Plugins @@ -52,13 +55,13 @@ - Filter - New Modules - v8\.3\.0 - - Release Summary + - Release Summary - Minor Changes - Deprecated Features - Bugfixes - New Modules - v8\.2\.0 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - New Plugins @@ -67,7 +70,7 @@ - Lookup - New Modules - v8\.1\.0 - - Release Summary + - Release Summary - Minor Changes - Bugfixes - New Plugins @@ -75,13 +78,13 @@ - Test - New Modules - v8\.0\.2 - - Release Summary + - Release Summary - Bugfixes - v8\.0\.1 - - Release Summary + - Release Summary - Bugfixes - v8\.0\.0 - - Release Summary + - Release Summary - Minor Changes - Breaking Changes / Porting Guide - Deprecated Features @@ -93,10 +96,23 @@ - New Modules This changelog describes changes after version 7\.0\.0\. + +## v8\.6\.9 + + +### Release Summary + +Maintenance release with a security fix\. + + +### Security Fixes + +* keycloak\_authentication \- API calls did not properly set the priority during update resulting in incorrectly sorted authentication flows\. This apparently only affects Keycloak 25 or newer \([https\://github\.com/ansible\-collections/community\.general/pull/9263](https\://github\.com/ansible\-collections/community\.general/pull/9263)\)\. + ## v8\.6\.8 - + ### Release Summary Maintenance release for inclusion in Ansible 9\.13\.0\. @@ -109,7 +125,7 @@ Maintenance release for inclusion in Ansible 9\.13\.0\. ## v8\.6\.7 - + ### Release Summary Bugfix release\. @@ -123,7 +139,7 @@ Bugfix release\. ## v8\.6\.6 - + ### Release Summary Regular bugfix release\. @@ -158,7 +174,7 @@ security fixes\. ## v8\.6\.5 - + ### Release Summary Regular bugfix release\. @@ -177,7 +193,7 @@ Regular bugfix release\. ## v8\.6\.4 - + ### Release Summary Regular bugfix release\. @@ -198,7 +214,7 @@ Regular bugfix release\. ## v8\.6\.3 - + ### Release Summary Regular bugfix release\. @@ -219,7 +235,7 @@ Regular bugfix release\. ## v8\.6\.2 - + ### Release Summary Regular bugfix release\. @@ -246,12 +262,12 @@ Regular bugfix release\. ## v8\.6\.1 - + ### Release Summary Regular bugfix release\. - + ### Security Fixes * keycloak\_identity\_provider \- the client secret was not correctly sanitized by the module\. The return values proposed\, existing\, and end\_state\, as well as the diff\, did contain the client secret unmasked \([https\://github\.com/ansible\-collections/community\.general/pull/8355](https\://github\.com/ansible\-collections/community\.general/pull/8355)\)\. @@ -267,7 +283,7 @@ Regular bugfix release\. ## v8\.6\.0 - + ### Release Summary Regular bugfix and features release\. @@ -321,7 +337,7 @@ Regular bugfix and features release\. ## v8\.5\.0 - + ### Release Summary Regular feature and bugfix release with security fixes\. @@ -339,7 +355,7 @@ Regular feature and bugfix release with security fixes\. * proxmox \- adds startup parameters to configure startup order\, startup delay and shutdown delay \([https\://github\.com/ansible\-collections/community\.general/pull/8038](https\://github\.com/ansible\-collections/community\.general/pull/8038)\)\. * revbitspss lookup plugin \- removed a redundant unicode prefix\. The prefix was not necessary for Python 3 and has been cleaned up to streamline the code \([https\://github\.com/ansible\-collections/community\.general/pull/8087](https\://github\.com/ansible\-collections/community\.general/pull/8087)\)\. - + ### Security Fixes * cobbler\, gitlab\_runners\, icinga2\, linode\, lxd\, nmap\, online\, opennebula\, proxmox\, scaleway\, stackpath\_compute\, virtualbox\, and xen\_orchestra inventory plugin \- make sure all data received from the remote servers is marked as unsafe\, so remote code execution by obtaining texts that can be evaluated as templates is not possible \([https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/](https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/)\, [https\://github\.com/ansible\-collections/community\.general/pull/8098](https\://github\.com/ansible\-collections/community\.general/pull/8098)\)\. @@ -366,7 +382,7 @@ Regular feature and bugfix release with security fixes\. ## v8\.4\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -422,7 +438,7 @@ Regular bugfix and feature release\. ## v8\.3\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -469,7 +485,7 @@ Regular bugfix and feature release\. ## v8\.2\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -530,7 +546,7 @@ Regular bugfix and feature release\. ## v8\.1\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -613,7 +629,7 @@ Regular bugfix and feature release\. ## v8\.0\.2 - + ### Release Summary Bugfix release for inclusion in Ansible 9\.0\.0rc1\. @@ -627,7 +643,7 @@ Bugfix release for inclusion in Ansible 9\.0\.0rc1\. ## v8\.0\.1 - + ### Release Summary Bugfix release for inclusion in Ansible 9\.0\.0b1\. @@ -645,7 +661,7 @@ Bugfix release for inclusion in Ansible 9\.0\.0b1\. ## v8\.0\.0 - + ### Release Summary This is release 8\.0\.0 of community\.general\, released on 2023\-11\-01\. diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 46e87bb81a..69900a32a5 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -6,6 +6,19 @@ Community General Release Notes This changelog describes changes after version 7.0.0. +v8.6.9 +====== + +Release Summary +--------------- + +Maintenance release with a security fix. + +Security Fixes +-------------- + +- keycloak_authentication - API calls did not properly set the ``priority`` during update resulting in incorrectly sorted authentication flows. This apparently only affects Keycloak 25 or newer (https://github.com/ansible-collections/community.general/pull/9263). + v8.6.8 ====== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index 43bd69e85c..21054d5408 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -1674,3 +1674,14 @@ releases: - 8.6.8.yml - 9186-fix-broken-check-mode-in-github-key.yml release_date: '2024-12-02' + 8.6.9: + changes: + release_summary: Maintenance release with a security fix. + security_fixes: + - keycloak_authentication - API calls did not properly set the ``priority`` + during update resulting in incorrectly sorted authentication flows. This + apparently only affects Keycloak 25 or newer (https://github.com/ansible-collections/community.general/pull/9263). + fragments: + - 8.6.9.yml + - 9263-kc_authentication-api-priority.yaml + release_date: '2024-12-31' diff --git a/changelogs/fragments/8.6.9.yml b/changelogs/fragments/8.6.9.yml deleted file mode 100644 index 1a762dd62e..0000000000 --- a/changelogs/fragments/8.6.9.yml +++ /dev/null @@ -1 +0,0 @@ -release_summary: Maintenance release with a security fix. diff --git a/changelogs/fragments/9263-kc_authentication-api-priority.yaml b/changelogs/fragments/9263-kc_authentication-api-priority.yaml deleted file mode 100644 index a943e659ad..0000000000 --- a/changelogs/fragments/9263-kc_authentication-api-priority.yaml +++ /dev/null @@ -1,2 +0,0 @@ -security_fixes: - - keycloak_authentication - API calls did not properly set the ``priority`` during update resulting in incorrectly sorted authentication flows. This apparently only affects Keycloak 25 or newer (https://github.com/ansible-collections/community.general/pull/9263). \ No newline at end of file