LWN.net Logo

Fedora alert FEDORA-2013-17449 (python-djblets)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 19 Update: python-djblets-0.7.18-1.fc19
Date:  Mon, 30 Sep 2013 00:40:31 +0000
Message-ID:  <20130930004031.07B2122509@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-17449 2013-09-23 22:48:26 -------------------------------------------------------------------------------- Name : python-djblets Product : Fedora 19 Version : 0.7.18 Release : 1.fc19 URL : http://www.review-board.org Summary : A collection of useful classes and functions for Django Description : A collection of useful classes and functions for Django -------------------------------------------------------------------------------- Update Information: * Mon Sep 23 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.7.14-1 - New upstream security release 1.7.14 - http://www.reviewboard.org/docs/releasenotes/reviewboard/... - Some API resources were accessible even if their parent resources were not, due to a missing check. In most cases, this was harmless, but it can affect those using access control on groups or review requests. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 23 2013 Stephen Gallagher <sgallagh@redhat.com> - 0.7.18-1 - New upstream security release 0.7.18 - http://downloads.reviewboard.org/releases/Djblets/0.7/Djb... - Web API resource lists are now more careful about access permissions. * Thu Aug 15 2013 Stephen Gallagher <sgallagh@redhat.com> - 0.7.17-1 - New upstream release 0.7.17 - http://downloads.reviewboard.org/releases/Djblets/0.7/Djb... * Mon Jul 29 2013 Stephen Gallagher <sgallagh@redhat.com> - 0.7.16-1 - New upstream release 0.7.16 - This release contains security fixes in the datagrid - JavaScript: * autoSizeTextArea now cleans up its hidden proxy elements when destroyed. * inlineEditor can be told not to focus a textarea by default by setting 'focusOnOpen' to false. * modalBox can place itself in an element other than <body> by setting the 'container' option to the element. * modalBox takes a 'boxID' option that, if specified, will set the ID of the modalBox element. * funcQueue now takes an optional context parameter for callback functions. - djblets.datagrid: * Data pulled from the database and rendered into cells are always escaped now. * Columns can now specify an image_class instead of an image_url. * Added a JavaScript reload() function that can be called on a datagrid element to trigger a dynamic reload from the server. - djblets.extensions: * Extensions can now specify their list of app directories. * Extensions can now specify the author's URL. * Improved the look and feel for extension configuration. * Improved the functionality for extension configuration. * Improved the list of available extensions. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1008423 - ReviewBoard-1.7.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1008423 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-djblets' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds