add release notes for 3.12.1

_includes/manuals/3.12/1.2_release_notes.md

@@ -50,6 +50,27 @@ For more details and discussion, see https://community.theforeman.org/t/drop-sup
 
 A full list of changes in 3.12.0 is available via [Redmine](https://projects.theforeman.org/issues?set_filter=1&sort=id%3Adesc&status_id=closed&f[]=cf_12&op[cf_12]=%3D&v[cf_12]=1836)
 
+### Release notes for 3.12.1
+#### Foreman - Templates
+* Fix CVE-2024-8553 ([#37978](https://projects.theforeman.org/issues/37978))
+
+#### Foreman - Unattended installations
+* Ansible password is not extracted correctly in the Windows default provisioning template ([#37903](https://projects.theforeman.org/issues/37903))
+* Missing enable-puppet8 parameter to enable AIO style packaging ([#37891](https://projects.theforeman.org/issues/37891))
+
+#### Installer
+* Checks don’t disable the default CA path which means openssl will use the default system CA path by default ([#37828](https://projects.theforeman.org/issues/37828))
+
+#### Installer - Foreman modules
+* Installer fails with OpenJDK 17 on missing keyalg parameter to keytool ([#38010](https://projects.theforeman.org/issues/38010))
+
+#### Installer - foreman-installer script
+* Katello-certs-check no longer works on RHEL8 ([#38027](https://projects.theforeman.org/issues/38027))
+* Java detection doesn't handle Java 11 and newer and always stops the service ([#38012](https://projects.theforeman.org/issues/38012))
+* Disconnected upgrade fails to switch postgresql dnf module ([#37874](https://projects.theforeman.org/issues/37874))
+
+*A full list of changes in 3.12.1 is available via [Redmine](https://projects.theforeman.org/issues?set_filter=1&sort=id%3Adesc&status_id=closed&f[]=cf_12&op[cf_12]=%3D&v[cf_12]=1900)*
+
 ### Release notes for 3.12.0
 #### Foreman
 * Bulk Packages wizard - Host search bleeds into package/errata search ([#37768](https://projects.theforeman.org/issues/37768))