From fa7ebb9c28d65e6474a1f473f67e9e9ba7deb0b4 Mon Sep 17 00:00:00 2001 From: Matt Martz Date: Tue, 3 Oct 2023 14:31:36 -0400 Subject: [PATCH] New release v2.13.13rc1 --- changelogs/CHANGELOG-v2.13.rst | 20 ++++++++++++++++++++ changelogs/changelog.yaml | 19 +++++++++++++++++++ changelogs/fragments/2.13.13rc1_summary.yaml | 3 +++ lib/ansible/release.py | 2 +- 4 files changed, 43 insertions(+), 1 deletion(-) create mode 100644 changelogs/fragments/2.13.13rc1_summary.yaml diff --git a/changelogs/CHANGELOG-v2.13.rst b/changelogs/CHANGELOG-v2.13.rst index deb25447f74fbd..00257b4df2f66a 100644 --- a/changelogs/CHANGELOG-v2.13.rst +++ b/changelogs/CHANGELOG-v2.13.rst @@ -5,6 +5,26 @@ ansible-core 2.13 "Nobody's Fault but Mine" Release Notes .. contents:: Topics +v2.13.13rc1 +=========== + +Release Summary +--------------- + +| Release Date: 2023-10-03 +| `Porting Guide `__ + + +Security Fixes +-------------- + +- ansible-galaxy - Prevent roles from using symlinks to overwrite files outside of the installation directory (CVE-2023-5115) + +Bugfixes +-------- + +- ansible-galaxy info - fix reporting no role found when lookup_role_by_name returns None. + v2.13.12 ======== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index 1d55bf650c0578..228797e841b8c2 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -957,6 +957,25 @@ releases: - tarfile_extract_warn.yml - urls-unit-test-latest-cryptography.yml release_date: '2023-09-05' + 2.13.13rc1: + changes: + bugfixes: + - ansible-galaxy info - fix reporting no role found when lookup_role_by_name + returns None. + release_summary: '| Release Date: 2023-10-03 + + | `Porting Guide `__ + + ' + security_fixes: + - ansible-galaxy - Prevent roles from using symlinks to overwrite files outside + of the installation directory (CVE-2023-5115) + codename: Nobody's Fault but Mine + fragments: + - 2.13.13rc1_summary.yaml + - cve-2023-5115.yml + - fix-ansible-galaxy-info-no-role-found.yml + release_date: '2023-10-03' 2.13.1rc1: changes: bugfixes: diff --git a/changelogs/fragments/2.13.13rc1_summary.yaml b/changelogs/fragments/2.13.13rc1_summary.yaml new file mode 100644 index 00000000000000..8a0ed95b8fb913 --- /dev/null +++ b/changelogs/fragments/2.13.13rc1_summary.yaml @@ -0,0 +1,3 @@ +release_summary: | + | Release Date: 2023-10-03 + | `Porting Guide `__ diff --git a/lib/ansible/release.py b/lib/ansible/release.py index 5e3f84d5aea666..8c15654355c666 100644 --- a/lib/ansible/release.py +++ b/lib/ansible/release.py @@ -19,6 +19,6 @@ from __future__ import (absolute_import, division, print_function) __metaclass__ = type -__version__ = '2.13.12.post0' +__version__ = '2.13.13rc1' __author__ = 'Ansible, Inc.' __codename__ = "Nobody's Fault but Mine"