Backporting CHANGELOG/RELEASES and packaging updates for 1.6.7-8 rele…

…ases

CHANGELOG.md

@@ -34,6 +34,18 @@ Other notable changes:
 * Inventory speed improvements for very large inventories.
 * Vault password files can now be executable, to support scripts that fetch the vault password.
 
+## 1.6.8 "And the Cradle Will Rock" - Jul 22, 2014
+
+- Corrects a regression in the way shell and command parameters were being parsed
+
+## 1.6.7 "And the Cradle Will Rock" - Jul 21, 2014
+
+- Security fixes:
+  * Strip lookup calls out of inventory variables and clean unsafe data
+    returned from lookup plugins (CVE-2014-4966)
+  * Make sure vars don't insert extra parameters into module args and prevent
+    duplicate params from superseding previous params (CVE-2014-4967)
+
 ## 1.6.6 "And the Cradle Will Rock" - Jul 01, 2014
 
 - Security updates to further protect against the incorrect execution of untrusted data

RELEASES.txt

@@ -6,6 +6,8 @@ Active Development
 
 1.7    "Summer Nights" -------- SUMMER 2014
 
+1.6.8  "The Cradle Will Rock" - 07-22-2014
+1.6.7  "The Cradle Will Rock" - 07-21-2014
 1.6.6  "The Cradle Will Rock" - 07-01-2014
 1.6.5  "The Cradle Will Rock" - 06-25-2014
 1.6.4  "The Cradle Will Rock" - 06-25-2014

packaging/debian/changelog

@@ -2,7 +2,19 @@ ansible (1.7) unstable; urgency=low
 
   * 1.7 release (PENDING)
 
- -- Michael DeHaan <[email protected]>  Wed, 07 May 2014 15:00:03 -0500
+ -- Michael DeHaan <[email protected]>  Wed, 07 May 2014 15:00:03 -0500
+
+ansible (1.6.8) unstable; urgency=low
+
+  * 1.6.8 release
+
+ -- Michael DeHaan <[email protected]>  Tue, 22 Jul 2014 17:30:00 -0500
+
+ansible (1.6.7) unstable; urgency=low
+
+  * 1.6.7 release
+
+ -- Michael DeHaan <[email protected]>  Mon, 21 Jul 2014 12:30:00 -0500
 
 ansible (1.6.6) unstable; urgency=low
 

packaging/rpm/ansible.spec

@@ -115,6 +115,12 @@ rm -rf %{buildroot}
 
 %changelog
 
+* Tue Jul 22 2014 Michael DeHaan <[email protected]> - 1.6.8
+- Release 1.6.8
+
+* Mon Jul 21 2014 Michael DeHaan <[email protected]> - 1.6.7
+- Release 1.6.7
+
 * Tue Jul 01 2014 Michael DeHaan <[email protected]> - 1.6.6
 - Release 1.6.6