New release: ansible-core 2.15.7

35 views
Skip to first unread message

Matt Martz

unread,
Dec 4, 2023, 4:56:14 PM12/4/23
to ansible-...@googlegroups.com, ansible...@googlegroups.com, Ansible Development
Hi all- we're happy to announce the general release of:

ansible-core 2.15.7


How to get it
-------------

$ python3 -m pip install --user ansible-core==2.15.7

The release artifacts can be found here:

# Built Distribution: 2249306 bytes
# SHA256: 8a7988b8fbd1f4bb5799becae120b828de6248ba9056d83f427235533d655e2b
https://files.pythonhosted.org/packages/bb/06/b68cdd0395f1cee716da07dfd7b9f8153e0ed689d6a2ac47dc0a44a672ce/ansible_core-2.15.7-py3-none-any.whl
# Source Distribution: 3159286 bytes
# SHA256: bc51d011bdb67538d1ee043e0f8072b3a849b78897caf15b6f294160c5c7c6ba
https://files.pythonhosted.org/packages/c9/a4/3f41ca3f4e70f3eb1e38cfe47fbc2dfddbd45314efb710f9d1a2b1b143b6/ansible-core-2.15.7.tar.gz


What's new
----------

This release includes a fix for CVE-2023-5764, where internal templating actions could result in unsafe data losing its unsafe designation.

The devel branch is still currently vulnerable to CVE-2023-5764 and will be mitigated with a different fix in the coming weeks. Production users should ensure they are using released stable versions.

The full changelog can be found here:

https://github.com/ansible/ansible/blob/v2.15.7/changelogs/CHANGELOG-v2.15.rst


Schedule for future releases
----------------------------

The next release candidate is planned to be released on 25 December 2023. The next general availability release will be one week after.


Porting help
------------

If you discover any errors or if any of your working playbooks break when you upgrade, please use the following link to report the regression:

https://github.com/ansible/ansible/issues/new/choose

In your issue, be sure to mention the version that works and the one that doesn't.

Thanks!
Reply all
Reply to author
Forward
0 new messages