Ansible Releases
Ansible core releases. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 6 Ansible releases · Updated
- Ansible Core Releases securityinfraengineer ·
Ansible 2.16.19 Fixes Security Vulnerability in Galaxy
Ansible version 2.16.19 addresses a security vulnerability in `ansible-galaxy install` where malicious role authors could inject arbitrary git configurations. This patch ensures role requirements are passed as positional arguments to `git clone`, mitigating the risk for users installing roles. The fix is available in this patch release.
patch security - Ansible Core Releases securityinfraengineer ·
Ansible 2.18.18 Security Fixes
Ansible version 2.18.18 includes a security fix for ansible-galaxy install to prevent arbitrary git configuration injection in role dependencies. This addresses a vulnerability where malicious role authors could exploit role requirements. The fix ensures requirements are passed as positional arguments to git clone, protecting users from potential exploits.
security patch - Ansible Core Releases securityinfraengineer ·
Ansible v2.19.11 Security Fix and Bugfixes
Ansible v2.19.11 addresses a security vulnerability in ansible-galaxy install related to role requirements, preventing potential injection of arbitrary git configurations. The release also includes bug fixes for sanitize_keys and remove_value functions, ensuring consistent obscuring of matching subsets, and updates the FreeBSD test environment. This patch is recommended for all users to mitigate security risks and improve reliability.
security patch - Ansible Core Releases securityinfraengineer ·
Ansible Security Fixes and Bug Fixes in v2.20.7
Ansible v2.20.7 includes security fixes addressing potential arbitrary git configuration injection via malicious roles and bug fixes to improve the obscuring of matching subsets in sanitize_keys and remove_value functions. This patch release ensures greater security and reliability for users managing their infrastructure with Ansible.
security patch - Ansible Core Releases securityinfraengineer ·
Ansible v2.21.1: Security Fixes and Bug Fixes
Ansible v2.21.1 addresses security vulnerabilities in ansible-galaxy and the psrp/winrm modules, preventing arbitrary code injection and sensitive log exposure. It also resolves several bugs, including issues with empty PAGER values, configuration injection settings, playbook execution with unreachable hosts, skipped meta actions, and command execution handling. These fixes are available now for all users.
security patch
About Ansible release tracking on ReleaseBytes
Ansible Core releases deprecate modules, change Python version requirements and occasionally break playbook behaviour. ReleaseBytes tracks ansible/ansible (ansible-core) releases, summarises what changed, and its EOL tracker shows the support windows for each ansible-core version so you know when yours stops getting security fixes.
Frequently asked questions
How often are Ansible release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official Ansible release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of Ansible changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new Ansible releases? ›
Set up a free email or Slack alert filtered to Ansible, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the Ansible release data come from? ›
From the official sources: Ansible core releases. Every item links back to the original vendor announcement.