diff --git a/CHANGELOG.md b/CHANGELOG.md index eae8d722..4b360d8b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,157 +1,174 @@ # Docker Community Collection Release Notes **Topics** + +- v2\.7\.9 + - Release Summary + - Security Fixes - v2\.7\.8 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.7 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.6 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.5 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.4 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.3 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.2 - - Release Summary - - Minor Changes + - Release Summary + - Minor Changes - v2\.7\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.7\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes - v2\.6\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes - v2\.5\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.5\.0 - - Release Summary - - Minor Changes + - Release Summary + - Minor Changes - v2\.4\.0 - - Release Summary - - Minor Changes - - Bugfixes + - Release Summary + - Minor Changes + - Bugfixes - v2\.3\.0 - - Release Summary - - Minor Changes - - Bugfixes + - Release Summary + - Minor Changes + - Bugfixes - v2\.2\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.2\.0 - - Release Summary - - Minor Changes - - Bugfixes + - Release Summary + - Minor Changes + - Bugfixes - v2\.1\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.1\.0 - - Release Summary - - Minor Changes - - Bugfixes + - Release Summary + - Minor Changes + - Bugfixes - v2\.0\.2 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v2\.0\.1 - - Release Summary + - Release Summary - v2\.0\.0 - - Release Summary - - Breaking Changes / Porting Guide - - Deprecated Features - - Removed Features \(previously deprecated\) + - Release Summary + - Breaking Changes / Porting Guide + - Deprecated Features + - Removed Features \(previously deprecated\) - v1\.10\.0 - - Release Summary - - Minor Changes + - Release Summary + - Minor Changes - v1\.9\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v1\.9\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes - - New Plugins - - Connection + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes + - New Plugins + - Connection - v1\.8\.0 - - Release Summary - - Minor Changes - - Bugfixes + - Release Summary + - Minor Changes + - Bugfixes - v1\.7\.0 - - Release Summary - - Minor Changes + - Release Summary + - Minor Changes - v1\.6\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v1\.6\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes - v1\.5\.0 - - Release Summary - - Minor Changes - - Bugfixes - - New Modules + - Release Summary + - Minor Changes + - Bugfixes + - New Modules - v1\.4\.0 - - Release Summary - - Minor Changes - - Breaking Changes / Porting Guide - - Security Fixes - - Bugfixes + - Release Summary + - Minor Changes + - Breaking Changes / Porting Guide + - Security Fixes + - Bugfixes - v1\.3\.0 - - Release Summary - - Minor Changes - - Bugfixes - - New Modules + - Release Summary + - Minor Changes + - Bugfixes + - New Modules - v1\.2\.2 - - Release Summary - - Security Fixes + - Release Summary + - Security Fixes - v1\.2\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v1\.2\.0 - - Release Summary - - Minor Changes - - Bugfixes + - Release Summary + - Minor Changes + - Bugfixes - v1\.1\.0 - - Release Summary - - Minor Changes - - Deprecated Features - - Bugfixes - - New Plugins - - Connection - - Inventory - - New Modules + - Release Summary + - Minor Changes + - Deprecated Features + - Bugfixes + - New Plugins + - Connection + - Inventory + - New Modules - v1\.0\.1 - - Release Summary - - Bugfixes + - Release Summary + - Bugfixes - v1\.0\.0 - - Release Summary - - Minor Changes + - Release Summary + - Minor Changes - v0\.1\.0 - - Release Summary - - Minor Changes - - Removed Features \(previously deprecated\) - - Bugfixes + - Release Summary + - Minor Changes + - Removed Features \(previously deprecated\) + - Bugfixes + + +## v2\.7\.9 + + +### Release Summary + +Bugfix release\. + + +### Security Fixes + +* docker\_containers\, docker\_machine\, and docker\_swarm inventory plugins \- make sure all data received from the Docker daemon / Docker machine is marked as unsafe\, so remote code execution by obtaining texts that can be evaluated as templates is not possible \([https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/](https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/)\, [https\://github\.com/ansible\-collections/community\.docker/pull/815](https\://github\.com/ansible\-collections/community\.docker/pull/815)\)\. ## v2\.7\.8 - + ### Release Summary Bugfix release\. @@ -166,7 +183,7 @@ Bugfix release\. ## v2\.7\.7 - + ### Release Summary Bugfix release\. @@ -180,7 +197,7 @@ Bugfix release\. ## v2\.7\.6 - + ### Release Summary Bugfix release\. @@ -193,7 +210,7 @@ Bugfix release\. ## v2\.7\.5 - + ### Release Summary Bugfix release\. @@ -207,7 +224,7 @@ Bugfix release\. ## v2\.7\.4 - + ### Release Summary Bugfix release\. @@ -223,7 +240,7 @@ Bugfix release\. ## v2\.7\.3 - + ### Release Summary Bugfix release\. @@ -236,7 +253,7 @@ Bugfix release\. ## v2\.7\.2 - + ### Release Summary Bugfix release\. @@ -249,7 +266,7 @@ Bugfix release\. ## v2\.7\.1 - + ### Release Summary Maintenance release with updated documentation\. @@ -262,7 +279,7 @@ Maintenance release with updated documentation\. ## v2\.7\.0 - + ### Release Summary Bugfix and deprecation release\. The next 2\.x\.y releases will only be bugfix releases\, the next expect minor/major release will be 3\.0\.0 with some major changes\. @@ -286,7 +303,7 @@ Bugfix and deprecation release\. The next 2\.x\.y releases will only be bugfix r ## v2\.6\.0 - + ### Release Summary Bugfix and feature release\. @@ -313,7 +330,7 @@ Bugfix and feature release\. ## v2\.5\.1 - + ### Release Summary Maintenance release\. @@ -326,7 +343,7 @@ Maintenance release\. ## v2\.5\.0 - + ### Release Summary Regular feature release\. @@ -340,7 +357,7 @@ Regular feature release\. ## v2\.4\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -360,7 +377,7 @@ Regular feature and bugfix release\. ## v2\.3\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -383,7 +400,7 @@ Regular feature and bugfix release\. ## v2\.2\.1 - + ### Release Summary Regular bugfix release\. @@ -396,7 +413,7 @@ Regular bugfix release\. ## v2\.2\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -416,7 +433,7 @@ Regular feature and bugfix release\. ## v2\.1\.1 - + ### Release Summary Emergency release to amend breaking change in previous release\. @@ -429,7 +446,7 @@ Emergency release to amend breaking change in previous release\. ## v2\.1\.0 - + ### Release Summary Feature and bugfix release\. @@ -450,7 +467,7 @@ Feature and bugfix release\. ## v2\.0\.2 - + ### Release Summary Bugfix release\. @@ -466,7 +483,7 @@ Bugfix release\. ## v2\.0\.1 - + ### Release Summary Maintenance release with some documentation fixes\. @@ -474,7 +491,7 @@ Maintenance release with some documentation fixes\. ## v2\.0\.0 - + ### Release Summary New major release with some deprecations removed and a breaking change in the docker\_compose module regarding the timeout parameter\. @@ -500,7 +517,7 @@ New major release with some deprecations removed and a breaking change in the ## v1\.10\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -515,7 +532,7 @@ Regular feature and bugfix release\. ## v1\.9\.1 - + ### Release Summary Regular bugfix release\. @@ -528,7 +545,7 @@ Regular bugfix release\. ## v1\.9\.0 - + ### Release Summary New bugfixes and features release\. @@ -566,7 +583,7 @@ New bugfixes and features release\. ## v1\.8\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -588,7 +605,7 @@ Regular bugfix and feature release\. ## v1\.7\.0 - + ### Release Summary Small feature and bugfix release\. @@ -601,7 +618,7 @@ Small feature and bugfix release\. ## v1\.6\.1 - + ### Release Summary Bugfix release to reduce deprecation warning spam\. @@ -614,7 +631,7 @@ Bugfix release to reduce deprecation warning spam\. ## v1\.6\.0 - + ### Release Summary Regular bugfix and feature release\. @@ -640,7 +657,7 @@ Regular bugfix and feature release\. ## v1\.5\.0 - + ### Release Summary Regular feature release\. @@ -663,7 +680,7 @@ Regular feature release\. ## v1\.4\.0 - + ### Release Summary Security release to address another potential secret leak\. Also includes regular bugfixes and features\. @@ -678,7 +695,7 @@ Security release to address another potential secret leak\. Also includes regula * docker\_swarm \- if join\_token is specified\, a returned join token with the same value will be replaced by VALUE\_SPECIFIED\_IN\_NO\_LOG\_PARAMETER\. Make sure that you do not blindly use the join tokens from the return value of this module when the module is invoked with join\_token specified\! This breaking change appears in a minor release since it is necessary to fix a security issue \([https\://github\.com/ansible\-collections/community\.docker/pull/103](https\://github\.com/ansible\-collections/community\.docker/pull/103)\)\. - + ### Security Fixes * docker\_swarm \- the join\_token option is now marked as no\_log so it is no longer written into logs \([https\://github\.com/ansible\-collections/community\.docker/pull/103](https\://github\.com/ansible\-collections/community\.docker/pull/103)\)\. @@ -692,7 +709,7 @@ Security release to address another potential secret leak\. Also includes regula ## v1\.3\.0 - + ### Release Summary Regular feature and bugfix release\. @@ -723,12 +740,12 @@ Regular feature and bugfix release\. ## v1\.2\.2 - + ### Release Summary Security bugfix release to address CVE\-2021\-20191\. - + ### Security Fixes * docker\_swarm \- enabled no\_log for the option signing\_ca\_key to prevent accidental disclosure \(CVE\-2021\-20191\, [https\://github\.com/ansible\-collections/community\.docker/pull/80](https\://github\.com/ansible\-collections/community\.docker/pull/80)\)\. @@ -736,7 +753,7 @@ Security bugfix release to address CVE\-2021\-20191\. ## v1\.2\.1 - + ### Release Summary Bugfix release\. @@ -749,7 +766,7 @@ Bugfix release\. ## v1\.2\.0 - + ### Release Summary Feature release with one new feature and two bugfixes\. @@ -768,7 +785,7 @@ Feature release with one new feature and two bugfixes\. ## v1\.1\.0 - + ### Release Summary Feature release with three new plugins and modules\. @@ -813,7 +830,7 @@ Feature release with three new plugins and modules\. ## v1\.0\.1 - + ### Release Summary Maintenance release with a bugfix for docker\_container\. @@ -826,7 +843,7 @@ Maintenance release with a bugfix for docker\_container\. ## v1\.0\.0 - + ### Release Summary This is the first production \(non\-prerelease\) release of community\.docker\. @@ -841,7 +858,7 @@ This is the first production \(non\-prerelease\) release of community\.doc ## v0\.1\.0 - + ### Release Summary The community\.docker continues the work on the Ansible docker modules and plugins from their state in community\.general 1\.2\.0\. The changes listed here are thus relative to the modules and plugins community\.general\.docker\*\. diff --git a/CHANGELOG.md.license b/CHANGELOG.md.license deleted file mode 100644 index edff8c76..00000000 --- a/CHANGELOG.md.license +++ /dev/null @@ -1,3 +0,0 @@ -GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt) -SPDX-License-Identifier: GPL-3.0-or-later -SPDX-FileCopyrightText: Ansible Project diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 55b82e26..d58333cf 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -4,6 +4,19 @@ Docker Community Collection Release Notes .. contents:: Topics +v2.7.9 +====== + +Release Summary +--------------- + +Bugfix release. + +Security Fixes +-------------- + +- docker_containers, docker_machine, and docker_swarm inventory plugins - make sure all data received from the Docker daemon / Docker machine is marked as unsafe, so remote code execution by obtaining texts that can be evaluated as templates is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/, https://github.com/ansible-collections/community.docker/pull/815). + v2.7.8 ====== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index a7d29d98..22ff0ed5 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -805,3 +805,16 @@ releases: - 719-ee-reqs.yml - 721-docker-7.yml release_date: '2023-12-10' + 2.7.9: + changes: + release_summary: Bugfix release. + security_fixes: + - docker_containers, docker_machine, and docker_swarm inventory plugins - make + sure all data received from the Docker daemon / Docker machine is marked as + unsafe, so remote code execution by obtaining texts that can be evaluated + as templates is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/, + https://github.com/ansible-collections/community.docker/pull/815). + fragments: + - 2.7.9.yml + - inventory-rce.yml + release_date: '2024-03-16' diff --git a/changelogs/fragments/2.7.9.yml b/changelogs/fragments/2.7.9.yml deleted file mode 100644 index 8ce9aa96..00000000 --- a/changelogs/fragments/2.7.9.yml +++ /dev/null @@ -1 +0,0 @@ -release_summary: Bugfix release. diff --git a/changelogs/fragments/inventory-rce.yml b/changelogs/fragments/inventory-rce.yml deleted file mode 100644 index dd086c45..00000000 --- a/changelogs/fragments/inventory-rce.yml +++ /dev/null @@ -1,2 +0,0 @@ -security_fixes: - - "docker_containers, docker_machine, and docker_swarm inventory plugins - make sure all data received from the Docker daemon / Docker machine is marked as unsafe, so remote code execution by obtaining texts that can be evaluated as templates is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/, https://github.com/ansible-collections/community.docker/pull/815)."