Sicherheit: Mangelnde Rechteprüfung in python-djblets
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in python-djblets
ID: FEDORA-2013-17449
Distribution: Fedora
Plattformen: Fedora 19
Datum: Mo, 30. September 2013, 07:19
Referenzen: http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
Applikationen: python-djblets


Name        : python-djblets
Product : Fedora 19
Version : 0.7.18
Release : 1.fc19
URL : http://www.review-board.org
Summary : A collection of useful classes and functions for Django
Description :
A collection of useful classes and functions for Django

Update Information:

* Mon Sep 23 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.7.14-1
- New upstream security release 1.7.14
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
- Some API resources were accessible even if their parent resources were not,
due to a missing check. In most cases, this was harmless, but it can affect those using access control on groups or review requests.

* Mon Sep 23 2013 Stephen Gallagher <sgallagh@redhat.com> - 0.7.18-1
- New upstream security release 0.7.18
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.18.NEWS
- Web API resource lists are now more careful about access permissions.
* Thu Aug 15 2013 Stephen Gallagher <sgallagh@redhat.com> - 0.7.17-1
- New upstream release 0.7.17
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
* Mon Jul 29 2013 Stephen Gallagher <sgallagh@redhat.com> - 0.7.16-1
- New upstream release 0.7.16
- This release contains security fixes in the datagrid
- JavaScript:
* autoSizeTextArea now cleans up its hidden proxy elements when destroyed.
* inlineEditor can be told not to focus a textarea by default by setting
'focusOnOpen' to false.
* modalBox can place itself in an element other than <body> by
setting the
'container' option to the element.
* modalBox takes a 'boxID' option that, if specified, will set the
ID of
the modalBox element.
* funcQueue now takes an optional context parameter for callback functions.
- djblets.datagrid:
* Data pulled from the database and rendered into cells are always escaped
* Columns can now specify an image_class instead of an image_url.
* Added a JavaScript reload() function that can be called on a datagrid
element to trigger a dynamic reload from the server.
- djblets.extensions:
* Extensions can now specify their list of app directories.
* Extensions can now specify the author's URL.
* Improved the look and feel for extension configuration.
* Improved the functionality for extension configuration.
* Improved the list of available extensions.

[ 1 ] Bug #1008423 - ReviewBoard-1.7.14 is available

This update can be installed with the "yum" update program. Use
su -c 'yum update python-djblets' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list
Traut euch!
Neue Nachrichten