New release v2.7.12

changelogs/.changes.yaml

@@ -644,6 +644,12 @@ releases:
     - win_region-format.yaml
     - yum-select-version.yml
     release_date: '2019-05-23'
+  2.7.12:
+    codename: In the Light
+    fragments:
+    - fix_safe_eval.yml
+    - v2.7.12_summary.yaml
+    release_date: '2019-07-03'
   2.7.2:
     codename: In the Light
     fragments:

changelogs/CHANGELOG-v2.7.rst

@@ -5,6 +5,21 @@ Ansible 2.7 "In the Light" Release Notes
 .. contents:: Topics
 
 
+v2.7.12
+=======
+
+Release Summary
+---------------
+
+| Release Date: 2019-07-03
+| `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__
+
+
+Bugfixes
+--------
+
+- Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156
+
 v2.7.11
 =======
 

changelogs/fragments/v2.7.12_summary.yaml

@@ -0,0 +1,3 @@
+release_summary: |
+   | Release Date: 2019-07-03
+   | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__

lib/ansible/release.py

@@ -19,6 +19,6 @@
 from __future__ import (absolute_import, division, print_function)
 __metaclass__ = type
 
-__version__ = '2.7.11.post0'
+__version__ = '2.7.12'
 __author__ = 'Ansible, Inc.'
 __codename__ = 'In the Light'