ansible/changelogs/fragments/dont-template-cli-passwords.yml

bugfixes:
- >
  **security issue** - Convert CLI provided passwords to text initially, to
  prevent unsafe context being lost when converting from bytes->text during
  post processing of PlayContext. This prevents CLI provided passwords from
  being incorrectly templated (CVE-2019-14856)
Wrap CLI passwords as AnsibleUnsafeText (#63352) * isa string should rewrap as unsafe in get_validated_value * _is_unsafe shouldn't be concerned with underlying types * Start with passwords as text, instead of bytes * Remove unused imports * Add changelog fragment * Update changelog with CVE 2019-10-11 02:49:34 +00:00			`bugfixes:`
			`- >`
			`security issue - Convert CLI provided passwords to text initially, to`
			`prevent unsafe context being lost when converting from bytes->text during`
			`post processing of PlayContext. This prevents CLI provided passwords from`
			`being incorrectly templated (CVE-2019-14856)`