Prepare for 1.7.0-rc2 release

Author: apparentlymart

CHANGELOG.md

@@ -1,4 +1,4 @@
-## 1.7.0 (Unreleased)
+## 1.7.0-rc2 (January 11, 2024)
 
 UPGRADE NOTES:
 
@@ -38,7 +38,7 @@ BUG FIXES:
 * `terraform test`: Stop attempting to destroy run blocks that have no actual infrastructure to destroy. This fixes an issue where attempts to destroy "verification" run blocks that load only data sources would fail if the underlying infrastructure referenced by the run blocks had already been destroyed. ([#34331](https://github.com/hashicorp/terraform/pull/34331))
 * `terraform test`: Improve error message for invalid run block names. ([#34469](https://github.com/hashicorp/terraform/pull/34469))
 * `terraform test`: Fix bug where outputs in "empty" modules were not available to the assertions from Terraform test files. ([#34482](https://github.com/hashicorp/terraform/pull/34482))
-* security: update `golang.org/x/crypto` to patch CVE-2023-48795 [GH-34426]
+* security: Upstream patch to mitigate the security advisory CVE-2023-48795, which potentially affects `local-exec` and `file` provisioners connecting to remote hosts using SSH. ([#34426](https://github.com/hashicorp/terraform/issues/34426))
 
 ENHANCEMENTS: