# Ansible 2.0.2.0 has been released

**URL:** <https://forum.ansible.com/t/ansible-2-0-2-0-has-been-released/21210>\
**Category:** Ansible Project\
**Tags:** galaxy-ng\
**Created:** [April 19, 2016, 10:14pm UTC](https://forum.ansible.com/t/ansible-2-0-2-0-has-been-released/21210 "2016-04-19T22:14:23Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![James\_Cammarata](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@James\_Cammarata](https://forum.ansible.com/u/James_Cammarata)\
**Post date:** [April 19, 2016, 10:14pm UTC](https://forum.ansible.com/t/ansible-2-0-2-0-has-been-released/21210/1 "2016-04-19T22:14:23Z")

</div>

Hi all, 2.0.2.0 has been released, and is now available.

This release continues to fix bugs introduced in the 2.0 release, as well as one security bug:

- SECURITY: Fix lxc\_container module having predictable temp file names and setting file  
permissions on the temporary file too leniently on a temporary file that was  
executed as a script. Addresses CVE-2016-3096
- Fixed bugs related to the iteration of tasks when certain combinations of roles,  
blocks, and includes were used, especially when handling errors in rescue/always  
portions of blocks.
- Fixed some bugs in the URI module related to redirects and SSL handling.
- Fixed some bugs related to the incorrect creation of extra temp directories for  
uploading files, which were not cleaned up properly.
- Fixed a bug related to the variable precedence of role parameters, especially when

a role may be used both as a dependency of a role and directly by itself within the  
same play.

- Fixed some bugs in the 2.0 implementation of do/until.
- Fixed some bugs related to run\_once:

- Ensure that all hosts are marked as failed if a task marked as run\_once fails.
- Show a warning when using the free strategy when a run\_once task is encountered, as  
there is no way for the free strategy to guarantee the task is not run more than once.

- Fixed a bug where the assemble module was not honoring check mode in some situations.

- Fixed a bug related to delegate\_to, where we were incorrectly using variables from  
the inventory host rather than the delegated-to host.

- The ‘package’ meta-module now properly squashes items down to a single execution (as the  
apt/yum/other package modules do).

- Fixed a bug related to the ansible-galaxy CLI command dealing with paged results from  
the Galaxy server.

- Pipelining support is now available for the local and jail connection plugins, which is  
useful for users who do not wish to have temp files/directories created when running  
tasks with these connection types.

- Improvements in support for additional shell types.

- Improvements in the code which is used to calculate checksums for remote files.

- Some speed ups and bug fixes related to the variable merging code.

- Workaround bug in python subprocess on El Capitan that was making vault fail  
when attempting to encrypt a file

- Fix a bug in the uri module where setting headers via module params that

start with HEADER\_ were causing a traceback.

- Fix bug in the free strategy that was causing it to synchronize its workers  
after every task (making it a lot more like linear than it should have been).

As always, this update is available via PyPi and [releases.ansible.com](http://releases.ansible.com/) now, and packages for distros will be available as soon as possible.

Thanks, and enjoy!