Ansible 1.9.6 RC1 and 2.0.2 RC3 are available for testing

[James Cammarata]

Hi all, we're happy to announce a twofer:

Ansible 1.9.6 RC1 is available for testing, and fixes a couple of bugs introduced by the 1.9.5 release:

* Fixes several security bugs in the lxc_container module, which could result in someone with local privileges modifying a script which was being created with world-writable permissions, resulting in that new script being run with root permission.

* Fixes a bug where --limit was incorrectly affecting inventory variables being read.

* Fixes a bug where a role parameter named 'name' would incorrectly be used as the name of the role.

Ansible 2.0.2 RC3 likewise includes the fix for the lxc_container bug, as well as another minor bug related to using hostvars in a delegated action (which includes the use of local_action).

Ansible 2.0.2 RC3 can be downloaded here:

http://releases.ansible.com/ansible/ansible-2.0.2.0-0.3.rc3.tar.gz

SHA 256: ad99714b00f9de32b76046f96d2d773f9867be6a9506e266dbc3282b6efaced7

Ansible 1.9.6 RC1 can be downloaded here:

http://releases.ansible.com/ansible/ansible-1.9.6-0.1.rc1.tar.gz

SHA 256: ed65bc79788898fc91f68671f49eee41ce2ae40ba722f9584c91967f63f47929

If you discover any errors in either of these release candidates, please open a Github issue and be sure to mention you're testing against this release candidate.

Thanks!

James Cammarata

Ansible Lead/Sr. Principal Software Engineer

Ansible by Red Hat

twitter: @thejimic, github: jimi-c

[Ted Timmons]

On Wednesday, April 6, 2016 at 2:04:58 PM UTC-7, James Cammarata wrote:

* Fixes a bug where a role parameter named 'name' would incorrectly be used as the name of the role.

Aha. I thought that was just me.

It was a good opportunity to use a better name than name, though.