diff --git a/CHANGELOG.md b/CHANGELOG.md index e4ef57e979f..2e9a2e87f9b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,14 @@ Ansible Changes By Release ========================== +## 1.6.7 "And the Cradle Will Rock" - Jul 17, 2014 + +- Security fixes: + * Strip lookup calls out of inventory variables and clean unsafe data + returned from lookup plugins (CVE-2014-4966) + * Make sure vars don't insert extra parameters into module args and prevent + duplicate params from superseding previous params (CVE-2014-4967) + ## 1.6.6 "And the Cradle Will Rock" - Jul 01, 2014 - Security updates to further protect against the incorrect execution of untrusted data diff --git a/RELEASES.txt b/RELEASES.txt index 16e02013eb5..f53d66a1ccc 100644 --- a/RELEASES.txt +++ b/RELEASES.txt @@ -6,6 +6,7 @@ Active Development 1.7 "Summer Nights" -------- CURRENT DEVEL BRANCH +1.6.7 "The Cradle Will Rock" - 07-17-2014 1.6.6 "The Cradle Will Rock" - 07-01-2014 1.6.5 "The Cradle Will Rock" - 06-25-2014 1.6.4 "The Cradle Will Rock" - 06-25-2014 diff --git a/VERSION b/VERSION index ec70f755607..400084b1bf2 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.6.6 +1.6.7 diff --git a/lib/ansible/__init__.py b/lib/ansible/__init__.py index c0077e5e8c5..8908ca3f933 100644 --- a/lib/ansible/__init__.py +++ b/lib/ansible/__init__.py @@ -14,5 +14,5 @@ # # You should have received a copy of the GNU General Public License # along with Ansible. If not, see . -__version__ = '1.6.6' +__version__ = '1.6.7' __author__ = 'Michael DeHaan' diff --git a/packaging/debian/changelog b/packaging/debian/changelog index 585b071e141..a3fc1124fa7 100644 --- a/packaging/debian/changelog +++ b/packaging/debian/changelog @@ -1,3 +1,9 @@ +ansible (1.6.7) unstable; urgency=low + + * 1.6.7 release + + -- Michael DeHaan Thu, 17 Jul 2014 10:30:00 -0500 + ansible (1.6.6) unstable; urgency=low * 1.6.6 release diff --git a/packaging/rpm/ansible.spec b/packaging/rpm/ansible.spec index afde448aafd..2afc777480d 100644 --- a/packaging/rpm/ansible.spec +++ b/packaging/rpm/ansible.spec @@ -115,6 +115,9 @@ rm -rf %{buildroot} %changelog +* Thu Jul 17 2014 Michael DeHaan - 1.6.7 +- Release 1.6.7 + * Tue Jul 01 2014 Michael DeHaan - 1.6.6 - Release 1.6.6