# New Ansible release candidates 2.9.18rc1 and 2.8.19rc1

**URL:** <https://forum.ansible.com/t/new-ansible-release-candidates-2-9-18rc1-and-2-8-19rc1/34591>\
**Category:** Ansible Developer\
**Created:** [February 9, 2021, 5:58am UTC](https://forum.ansible.com/t/new-ansible-release-candidates-2-9-18rc1-and-2-8-19rc1/34591 "2021-02-09T05:58:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![relrod](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/relrod/32/107_2.png) [@relrod](https://forum.ansible.com/u/relrod)\
**Post date:** [February 9, 2021, 5:58am UTC](https://forum.ansible.com/t/new-ansible-release-candidates-2-9-18rc1-and-2-8-19rc1/34591/1 "2021-02-09T05:58:29Z")

</div>

Hi all- we're happy to announce that the general release of Ansible 2.9.18rc1  
and 2.8.19rc1 are now available!

These are release candidates of ansible made available for user testing and  
testing in CI environments.

A full listing of changes found in this release can be found in the  
changelog linked below. Of note, this release addresses the following  
\*security vulnerabilities\*:

\* CVE-2021-20228 where default and fallback values for no\_log parameters  
&nbsp;&nbsp;to modules were not previously masked.

\* CVE-2021-20178 where several parameters to the snmp\_facts module were  
&nbsp;&nbsp;logged and displayed despite containing sensitive information.

\* CVE-2021-20180 where several parameters to the  
&nbsp;&nbsp;bitbucket\_pipeline\_variable were logged and displayed despite  
&nbsp;&nbsp;containing sensitive information.

\* CVE-2021-20191 which addresses a number of modules whose parameters  
&nbsp;&nbsp;were logged and displayed despite containing sensitive  
&nbsp;&nbsp;information. For the full list of affected modules, refer to the  
&nbsp;&nbsp;changelog linked below.

How do you get it?