ansible-collections/community.docker
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.docker.git synced 2026-03-15 11:53:31 +00:00
Code Packages Projects Releases Wiki Activity

Release 2.7.9.

Browse Source
This commit is contained in:
Felix Fontein 2024-03-16 20:15:14 +01:00
parent e2e1bc796b
commit 1e93fd6dda
6 changed files with 191 additions and 154 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

177
CHANGELOG.md
View File

@ -1,134 +1,138 @@
# Docker Community Collection Release Notes
**Topics**
- <a href="#v2-7-8">v2\.7\.8</a>
- <a href="#v2-7-9">v2\.7\.9</a>
- <a href="#release-summary">Release Summary</a>
- <a href="#security-fixes">Security Fixes</a>
- <a href="#v2-7-8">v2\.7\.8</a>
- <a href="#release-summary-1">Release Summary</a>
- <a href="#bugfixes">Bugfixes</a>
- <a href="#v2-7-7">v2\.7\.7</a>
- <a href="#release-summary-1">Release Summary</a>
- <a href="#release-summary-2">Release Summary</a>
- <a href="#bugfixes-1">Bugfixes</a>
- <a href="#v2-7-6">v2\.7\.6</a>
- <a href="#release-summary-2">Release Summary</a>
- <a href="#release-summary-3">Release Summary</a>
- <a href="#bugfixes-2">Bugfixes</a>
- <a href="#v2-7-5">v2\.7\.5</a>
- <a href="#release-summary-3">Release Summary</a>
- <a href="#release-summary-4">Release Summary</a>
- <a href="#bugfixes-3">Bugfixes</a>
- <a href="#v2-7-4">v2\.7\.4</a>
- <a href="#release-summary-4">Release Summary</a>
- <a href="#release-summary-5">Release Summary</a>
- <a href="#bugfixes-4">Bugfixes</a>
- <a href="#v2-7-3">v2\.7\.3</a>
- <a href="#release-summary-5">Release Summary</a>
- <a href="#release-summary-6">Release Summary</a>
- <a href="#bugfixes-5">Bugfixes</a>
- <a href="#v2-7-2">v2\.7\.2</a>
- <a href="#release-summary-6">Release Summary</a>
- <a href="#release-summary-7">Release Summary</a>
- <a href="#minor-changes">Minor Changes</a>
- <a href="#v2-7-1">v2\.7\.1</a>
- <a href="#release-summary-7">Release Summary</a>
- <a href="#release-summary-8">Release Summary</a>
- <a href="#bugfixes-6">Bugfixes</a>
- <a href="#v2-7-0">v2\.7\.0</a>
- <a href="#release-summary-8">Release Summary</a>
- <a href="#release-summary-9">Release Summary</a>
- <a href="#minor-changes-1">Minor Changes</a>
- <a href="#deprecated-features">Deprecated Features</a>
- <a href="#bugfixes-7">Bugfixes</a>
- <a href="#v2-6-0">v2\.6\.0</a>
- <a href="#release-summary-9">Release Summary</a>
- <a href="#release-summary-10">Release Summary</a>
- <a href="#minor-changes-2">Minor Changes</a>
- <a href="#deprecated-features-1">Deprecated Features</a>
- <a href="#bugfixes-8">Bugfixes</a>
- <a href="#v2-5-1">v2\.5\.1</a>
- <a href="#release-summary-10">Release Summary</a>
- <a href="#release-summary-11">Release Summary</a>
- <a href="#bugfixes-9">Bugfixes</a>
- <a href="#v2-5-0">v2\.5\.0</a>
- <a href="#release-summary-11">Release Summary</a>
- <a href="#release-summary-12">Release Summary</a>
- <a href="#minor-changes-3">Minor Changes</a>
- <a href="#v2-4-0">v2\.4\.0</a>
- <a href="#release-summary-12">Release Summary</a>
- <a href="#release-summary-13">Release Summary</a>
- <a href="#minor-changes-4">Minor Changes</a>
- <a href="#bugfixes-10">Bugfixes</a>
- <a href="#v2-3-0">v2\.3\.0</a>
- <a href="#release-summary-13">Release Summary</a>
- <a href="#release-summary-14">Release Summary</a>
- <a href="#minor-changes-5">Minor Changes</a>
- <a href="#bugfixes-11">Bugfixes</a>
- <a href="#v2-2-1">v2\.2\.1</a>
- <a href="#release-summary-14">Release Summary</a>
- <a href="#release-summary-15">Release Summary</a>
- <a href="#bugfixes-12">Bugfixes</a>
- <a href="#v2-2-0">v2\.2\.0</a>
- <a href="#release-summary-15">Release Summary</a>
- <a href="#release-summary-16">Release Summary</a>
- <a href="#minor-changes-6">Minor Changes</a>
- <a href="#bugfixes-13">Bugfixes</a>
- <a href="#v2-1-1">v2\.1\.1</a>
- <a href="#release-summary-16">Release Summary</a>
- <a href="#release-summary-17">Release Summary</a>
- <a href="#bugfixes-14">Bugfixes</a>
- <a href="#v2-1-0">v2\.1\.0</a>
- <a href="#release-summary-17">Release Summary</a>
- <a href="#release-summary-18">Release Summary</a>
- <a href="#minor-changes-7">Minor Changes</a>
- <a href="#bugfixes-15">Bugfixes</a>
- <a href="#v2-0-2">v2\.0\.2</a>
- <a href="#release-summary-18">Release Summary</a>
- <a href="#release-summary-19">Release Summary</a>
- <a href="#bugfixes-16">Bugfixes</a>
- <a href="#v2-0-1">v2\.0\.1</a>
- <a href="#release-summary-19">Release Summary</a>
- <a href="#v2-0-0">v2\.0\.0</a>
- <a href="#release-summary-20">Release Summary</a>
- <a href="#v2-0-0">v2\.0\.0</a>
- <a href="#release-summary-21">Release Summary</a>
- <a href="#breaking-changes--porting-guide">Breaking Changes / Porting Guide</a>
- <a href="#deprecated-features-2">Deprecated Features</a>
- <a href="#removed-features-previously-deprecated">Removed Features \(previously deprecated\)</a>
- <a href="#v1-10-0">v1\.10\.0</a>
- <a href="#release-summary-21">Release Summary</a>
- <a href="#release-summary-22">Release Summary</a>
- <a href="#minor-changes-8">Minor Changes</a>
- <a href="#v1-9-1">v1\.9\.1</a>
- <a href="#release-summary-22">Release Summary</a>
- <a href="#release-summary-23">Release Summary</a>
- <a href="#bugfixes-17">Bugfixes</a>
- <a href="#v1-9-0">v1\.9\.0</a>
- <a href="#release-summary-23">Release Summary</a>
- <a href="#release-summary-24">Release Summary</a>
- <a href="#minor-changes-9">Minor Changes</a>
- <a href="#deprecated-features-3">Deprecated Features</a>
- <a href="#bugfixes-18">Bugfixes</a>
- <a href="#new-plugins">New Plugins</a>
- <a href="#connection">Connection</a>
- <a href="#v1-8-0">v1\.8\.0</a>
- <a href="#release-summary-24">Release Summary</a>
- <a href="#release-summary-25">Release Summary</a>
- <a href="#minor-changes-10">Minor Changes</a>
- <a href="#bugfixes-19">Bugfixes</a>
- <a href="#v1-7-0">v1\.7\.0</a>
- <a href="#release-summary-25">Release Summary</a>
- <a href="#release-summary-26">Release Summary</a>
- <a href="#minor-changes-11">Minor Changes</a>
- <a href="#v1-6-1">v1\.6\.1</a>
- <a href="#release-summary-26">Release Summary</a>
- <a href="#release-summary-27">Release Summary</a>
- <a href="#bugfixes-20">Bugfixes</a>
- <a href="#v1-6-0">v1\.6\.0</a>
- <a href="#release-summary-27">Release Summary</a>
- <a href="#release-summary-28">Release Summary</a>
- <a href="#minor-changes-12">Minor Changes</a>
- <a href="#deprecated-features-4">Deprecated Features</a>
- <a href="#bugfixes-21">Bugfixes</a>
- <a href="#v1-5-0">v1\.5\.0</a>
- <a href="#release-summary-28">Release Summary</a>
- <a href="#release-summary-29">Release Summary</a>
- <a href="#minor-changes-13">Minor Changes</a>
- <a href="#bugfixes-22">Bugfixes</a>
- <a href="#new-modules">New Modules</a>
- <a href="#v1-4-0">v1\.4\.0</a>
- <a href="#release-summary-29">Release Summary</a>
- <a href="#release-summary-30">Release Summary</a>
- <a href="#minor-changes-14">Minor Changes</a>
- <a href="#breaking-changes--porting-guide-1">Breaking Changes / Porting Guide</a>
- <a href="#security-fixes">Security Fixes</a>
- <a href="#security-fixes-1">Security Fixes</a>
- <a href="#bugfixes-23">Bugfixes</a>
- <a href="#v1-3-0">v1\.3\.0</a>
- <a href="#release-summary-30">Release Summary</a>
- <a href="#release-summary-31">Release Summary</a>
- <a href="#minor-changes-15">Minor Changes</a>
- <a href="#bugfixes-24">Bugfixes</a>
- <a href="#new-modules-1">New Modules</a>
- <a href="#v1-2-2">v1\.2\.2</a>
- <a href="#release-summary-31">Release Summary</a>
- <a href="#security-fixes-1">Security Fixes</a>
- <a href="#v1-2-1">v1\.2\.1</a>
- <a href="#release-summary-32">Release Summary</a>
- <a href="#security-fixes-2">Security Fixes</a>
- <a href="#v1-2-1">v1\.2\.1</a>
- <a href="#release-summary-33">Release Summary</a>
- <a href="#bugfixes-25">Bugfixes</a>
- <a href="#v1-2-0">v1\.2\.0</a>
- <a href="#release-summary-33">Release Summary</a>
- <a href="#release-summary-34">Release Summary</a>
- <a href="#minor-changes-16">Minor Changes</a>
- <a href="#bugfixes-26">Bugfixes</a>
- <a href="#v1-1-0">v1\.1\.0</a>
- <a href="#release-summary-34">Release Summary</a>
- <a href="#release-summary-35">Release Summary</a>
- <a href="#minor-changes-17">Minor Changes</a>
- <a href="#deprecated-features-5">Deprecated Features</a>
- <a href="#bugfixes-27">Bugfixes</a>
@ -137,21 +141,34 @@
- <a href="#inventory">Inventory</a>
- <a href="#new-modules-2">New Modules</a>
- <a href="#v1-0-1">v1\.0\.1</a>
- <a href="#release-summary-35">Release Summary</a>
- <a href="#release-summary-36">Release Summary</a>
- <a href="#bugfixes-28">Bugfixes</a>
- <a href="#v1-0-0">v1\.0\.0</a>
- <a href="#release-summary-36">Release Summary</a>
- <a href="#release-summary-37">Release Summary</a>
- <a href="#minor-changes-18">Minor Changes</a>
- <a href="#v0-1-0">v0\.1\.0</a>
- <a href="#release-summary-37">Release Summary</a>
- <a href="#release-summary-38">Release Summary</a>
- <a href="#minor-changes-19">Minor Changes</a>
- <a href="#removed-features-previously-deprecated-1">Removed Features \(previously deprecated\)</a>
- <a href="#bugfixes-29">Bugfixes</a>
<a id="v2-7-9"></a>
## v2\.7\.9
<a id="release-summary"></a>
### Release Summary
Bugfix release\.
<a id="security-fixes"></a>
### Security Fixes
* docker\_containers\, docker\_machine\, and docker\_swarm inventory plugins \- make sure all data received from the Docker daemon / Docker machine is marked as unsafe\, so remote code execution by obtaining texts that can be evaluated as templates is not possible \([https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/](https\://www\.die\-welt\.net/2024/03/remote\-code\-execution\-in\-ansible\-dynamic\-inventory\-plugins/)\, [https\://github\.com/ansible\-collections/community\.docker/pull/815](https\://github\.com/ansible\-collections/community\.docker/pull/815)\)\.
<a id="v2-7-8"></a>
## v2\.7\.8
<a id="release-summary"></a>
<a id="release-summary-1"></a>
### Release Summary
Bugfix release\.
@ -166,7 +183,7 @@ Bugfix release\.
<a id="v2-7-7"></a>
## v2\.7\.7
<a id="release-summary-1"></a>
<a id="release-summary-2"></a>
### Release Summary
Bugfix release\.
@ -180,7 +197,7 @@ Bugfix release\.
<a id="v2-7-6"></a>
## v2\.7\.6
<a id="release-summary-2"></a>
<a id="release-summary-3"></a>
### Release Summary
Bugfix release\.
@ -193,7 +210,7 @@ Bugfix release\.
<a id="v2-7-5"></a>
## v2\.7\.5
<a id="release-summary-3"></a>
<a id="release-summary-4"></a>
### Release Summary
Bugfix release\.
@ -207,7 +224,7 @@ Bugfix release\.
<a id="v2-7-4"></a>
## v2\.7\.4
<a id="release-summary-4"></a>
<a id="release-summary-5"></a>
### Release Summary
Bugfix release\.
@ -223,7 +240,7 @@ Bugfix release\.
<a id="v2-7-3"></a>
## v2\.7\.3
<a id="release-summary-5"></a>
<a id="release-summary-6"></a>
### Release Summary
Bugfix release\.
@ -236,7 +253,7 @@ Bugfix release\.
<a id="v2-7-2"></a>
## v2\.7\.2
<a id="release-summary-6"></a>
<a id="release-summary-7"></a>
### Release Summary
Bugfix release\.
@ -249,7 +266,7 @@ Bugfix release\.
<a id="v2-7-1"></a>
## v2\.7\.1
<a id="release-summary-7"></a>
<a id="release-summary-8"></a>
### Release Summary
Maintenance release with updated documentation\.
@ -262,7 +279,7 @@ Maintenance release with updated documentation\.
<a id="v2-7-0"></a>
## v2\.7\.0
<a id="release-summary-8"></a>
<a id="release-summary-9"></a>
### Release Summary
Bugfix and deprecation release\. The next 2\.x\.y releases will only be bugfix releases\, the next expect minor/major release will be 3\.0\.0 with some major changes\.
@ -286,7 +303,7 @@ Bugfix and deprecation release\. The next 2\.x\.y releases will only be bugfix r
<a id="v2-6-0"></a>
## v2\.6\.0
<a id="release-summary-9"></a>
<a id="release-summary-10"></a>
### Release Summary
Bugfix and feature release\.
@ -313,7 +330,7 @@ Bugfix and feature release\.
<a id="v2-5-1"></a>
## v2\.5\.1
<a id="release-summary-10"></a>
<a id="release-summary-11"></a>
### Release Summary
Maintenance release\.
@ -326,7 +343,7 @@ Maintenance release\.
<a id="v2-5-0"></a>
## v2\.5\.0
<a id="release-summary-11"></a>
<a id="release-summary-12"></a>
### Release Summary
Regular feature release\.
@ -340,7 +357,7 @@ Regular feature release\.
<a id="v2-4-0"></a>
## v2\.4\.0
<a id="release-summary-12"></a>
<a id="release-summary-13"></a>
### Release Summary
Regular feature and bugfix release\.
@ -360,7 +377,7 @@ Regular feature and bugfix release\.
<a id="v2-3-0"></a>
## v2\.3\.0
<a id="release-summary-13"></a>
<a id="release-summary-14"></a>
### Release Summary
Regular feature and bugfix release\.
@ -383,7 +400,7 @@ Regular feature and bugfix release\.
<a id="v2-2-1"></a>
## v2\.2\.1
<a id="release-summary-14"></a>
<a id="release-summary-15"></a>
### Release Summary
Regular bugfix release\.
@ -396,7 +413,7 @@ Regular bugfix release\.
<a id="v2-2-0"></a>
## v2\.2\.0
<a id="release-summary-15"></a>
<a id="release-summary-16"></a>
### Release Summary
Regular feature and bugfix release\.
@ -416,7 +433,7 @@ Regular feature and bugfix release\.
<a id="v2-1-1"></a>
## v2\.1\.1
<a id="release-summary-16"></a>
<a id="release-summary-17"></a>
### Release Summary
Emergency release to amend breaking change in previous release\.
@ -429,7 +446,7 @@ Emergency release to amend breaking change in previous release\.
<a id="v2-1-0"></a>
## v2\.1\.0
<a id="release-summary-17"></a>
<a id="release-summary-18"></a>
### Release Summary
Feature and bugfix release\.
@ -450,7 +467,7 @@ Feature and bugfix release\.
<a id="v2-0-2"></a>
## v2\.0\.2
<a id="release-summary-18"></a>
<a id="release-summary-19"></a>
### Release Summary
Bugfix release\.
@ -466,7 +483,7 @@ Bugfix release\.
<a id="v2-0-1"></a>
## v2\.0\.1
<a id="release-summary-19"></a>
<a id="release-summary-20"></a>
### Release Summary
Maintenance release with some documentation fixes\.
@ -474,7 +491,7 @@ Maintenance release with some documentation fixes\.
<a id="v2-0-0"></a>
## v2\.0\.0
<a id="release-summary-20"></a>
<a id="release-summary-21"></a>
### Release Summary
New major release with some deprecations removed and a breaking change in the <code>docker\_compose</code> module regarding the <code>timeout</code> parameter\.
@ -500,7 +517,7 @@ New major release with some deprecations removed and a breaking change in the <c
<a id="v1-10-0"></a>
## v1\.10\.0
<a id="release-summary-21"></a>
<a id="release-summary-22"></a>
### Release Summary
Regular feature and bugfix release\.
@ -515,7 +532,7 @@ Regular feature and bugfix release\.
<a id="v1-9-1"></a>
## v1\.9\.1
<a id="release-summary-22"></a>
<a id="release-summary-23"></a>
### Release Summary
Regular bugfix release\.
@ -528,7 +545,7 @@ Regular bugfix release\.
<a id="v1-9-0"></a>
## v1\.9\.0
<a id="release-summary-23"></a>
<a id="release-summary-24"></a>
### Release Summary
New bugfixes and features release\.
@ -566,7 +583,7 @@ New bugfixes and features release\.
<a id="v1-8-0"></a>
## v1\.8\.0
<a id="release-summary-24"></a>
<a id="release-summary-25"></a>
### Release Summary
Regular bugfix and feature release\.
@ -588,7 +605,7 @@ Regular bugfix and feature release\.
<a id="v1-7-0"></a>
## v1\.7\.0
<a id="release-summary-25"></a>
<a id="release-summary-26"></a>
### Release Summary
Small feature and bugfix release\.
@ -601,7 +618,7 @@ Small feature and bugfix release\.
<a id="v1-6-1"></a>
## v1\.6\.1
<a id="release-summary-26"></a>
<a id="release-summary-27"></a>
### Release Summary
Bugfix release to reduce deprecation warning spam\.
@ -614,7 +631,7 @@ Bugfix release to reduce deprecation warning spam\.
<a id="v1-6-0"></a>
## v1\.6\.0
<a id="release-summary-27"></a>
<a id="release-summary-28"></a>
### Release Summary
Regular bugfix and feature release\.
@ -640,7 +657,7 @@ Regular bugfix and feature release\.
<a id="v1-5-0"></a>
## v1\.5\.0
<a id="release-summary-28"></a>
<a id="release-summary-29"></a>
### Release Summary
Regular feature release\.
@ -663,7 +680,7 @@ Regular feature release\.
<a id="v1-4-0"></a>
## v1\.4\.0
<a id="release-summary-29"></a>
<a id="release-summary-30"></a>
### Release Summary
Security release to address another potential secret leak\. Also includes regular bugfixes and features\.
@ -678,7 +695,7 @@ Security release to address another potential secret leak\. Also includes regula
* docker\_swarm \- if <code>join\_token</code> is specified\, a returned join token with the same value will be replaced by <code>VALUE\_SPECIFIED\_IN\_NO\_LOG\_PARAMETER</code>\. Make sure that you do not blindly use the join tokens from the return value of this module when the module is invoked with <code>join\_token</code> specified\! This breaking change appears in a minor release since it is necessary to fix a security issue \([https\://github\.com/ansible\-collections/community\.docker/pull/103](https\://github\.com/ansible\-collections/community\.docker/pull/103)\)\.
<a id="security-fixes"></a>
<a id="security-fixes-1"></a>
### Security Fixes
* docker\_swarm \- the <code>join\_token</code> option is now marked as <code>no\_log</code> so it is no longer written into logs \([https\://github\.com/ansible\-collections/community\.docker/pull/103](https\://github\.com/ansible\-collections/community\.docker/pull/103)\)\.
@ -692,7 +709,7 @@ Security release to address another potential secret leak\. Also includes regula
<a id="v1-3-0"></a>
## v1\.3\.0
<a id="release-summary-30"></a>
<a id="release-summary-31"></a>
### Release Summary
Regular feature and bugfix release\.
@ -723,12 +740,12 @@ Regular feature and bugfix release\.
<a id="v1-2-2"></a>
## v1\.2\.2
<a id="release-summary-31"></a>
<a id="release-summary-32"></a>
### Release Summary
Security bugfix release to address CVE\-2021\-20191\.
<a id="security-fixes-1"></a>
<a id="security-fixes-2"></a>
### Security Fixes
* docker\_swarm \- enabled <code>no\_log</code> for the option <code>signing\_ca\_key</code> to prevent accidental disclosure \(CVE\-2021\-20191\, [https\://github\.com/ansible\-collections/community\.docker/pull/80](https\://github\.com/ansible\-collections/community\.docker/pull/80)\)\.
@ -736,7 +753,7 @@ Security bugfix release to address CVE\-2021\-20191\.
<a id="v1-2-1"></a>
## v1\.2\.1
<a id="release-summary-32"></a>
<a id="release-summary-33"></a>
### Release Summary
Bugfix release\.
@ -749,7 +766,7 @@ Bugfix release\.
<a id="v1-2-0"></a>
## v1\.2\.0
<a id="release-summary-33"></a>
<a id="release-summary-34"></a>
### Release Summary
Feature release with one new feature and two bugfixes\.
@ -768,7 +785,7 @@ Feature release with one new feature and two bugfixes\.
<a id="v1-1-0"></a>
## v1\.1\.0
<a id="release-summary-34"></a>
<a id="release-summary-35"></a>
### Release Summary
Feature release with three new plugins and modules\.
@ -813,7 +830,7 @@ Feature release with three new plugins and modules\.
<a id="v1-0-1"></a>
## v1\.0\.1
<a id="release-summary-35"></a>
<a id="release-summary-36"></a>
### Release Summary
Maintenance release with a bugfix for <code>docker\_container</code>\.
@ -826,7 +843,7 @@ Maintenance release with a bugfix for <code>docker\_container</code>\.
<a id="v1-0-0"></a>
## v1\.0\.0
<a id="release-summary-36"></a>
<a id="release-summary-37"></a>
### Release Summary
This is the first production \(non\-prerelease\) release of <code>community\.docker</code>\.
@ -841,7 +858,7 @@ This is the first production \(non\-prerelease\) release of <code>community\.doc
<a id="v0-1-0"></a>
## v0\.1\.0
<a id="release-summary-37"></a>
<a id="release-summary-38"></a>
### Release Summary
The <code>community\.docker</code> continues the work on the Ansible docker modules and plugins from their state in <code>community\.general</code> 1\.2\.0\. The changes listed here are thus relative to the modules and plugins <code>community\.general\.docker\*</code>\.

3
CHANGELOG.md.license
View File

@ -1,3 +0,0 @@
GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
SPDX-License-Identifier: GPL-3.0-or-later
SPDX-FileCopyrightText: Ansible Project

13
CHANGELOG.rst
View File

@ -4,6 +4,19 @@ Docker Community Collection Release Notes
.. contents:: Topics
v2.7.9
======
Release Summary
---------------
Bugfix release.
Security Fixes
--------------
- docker_containers, docker_machine, and docker_swarm inventory plugins - make sure all data received from the Docker daemon / Docker machine is marked as unsafe, so remote code execution by obtaining texts that can be evaluated as templates is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/, https://github.com/ansible-collections/community.docker/pull/815).
v2.7.8
======

13
changelogs/changelog.yaml
View File

@ -805,3 +805,16 @@ releases:
- 719-ee-reqs.yml
- 721-docker-7.yml
release_date: '2023-12-10'
2.7.9:
changes:
release_summary: Bugfix release.
security_fixes:
- docker_containers, docker_machine, and docker_swarm inventory plugins - make
sure all data received from the Docker daemon / Docker machine is marked as
unsafe, so remote code execution by obtaining texts that can be evaluated
as templates is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/,
https://github.com/ansible-collections/community.docker/pull/815).
fragments:
- 2.7.9.yml
- inventory-rce.yml
release_date: '2024-03-16'

1
changelogs/fragments/2.7.9.yml
View File

@ -1 +0,0 @@
release_summary: Bugfix release.

2
changelogs/fragments/inventory-rce.yml
View File

@ -1,2 +0,0 @@
security_fixes:
- "docker_containers, docker_machine, and docker_swarm inventory plugins - make sure all data received from the Docker daemon / Docker machine is marked as unsafe, so remote code execution by obtaining texts that can be evaluated as templates is not possible (https://www.die-welt.net/2024/03/remote-code-execution-in-ansible-dynamic-inventory-plugins/, https://github.com/ansible-collections/community.docker/pull/815)."