u/ewong/rhodecode-enterprise-ce-fork Files · docs/release-notes/release-notes-2.2.7.rst

mercurial: protocol security updates....

mercurial: protocol security updates. - fixes Mercurial CVE for lack of permissions checking on mercurial batch commands - more strict checks for permissions, now default to push instead of pull to be always on safe side. - decypher batch commands and pick top-most permission to be used

marcink - - Load All Authors

File last commit:

r1:854a839a default


                r2724:7a057a98

default

Download file

             release-notes-2.2.7.rst
        
                    13 lines
            
             | 256 B
            
                | text/x-rst
            
             |
                RstLexer
            
             / docs / release-notes / release-notes-2.2.7.rst
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        marcink
    
project: added all source files and assets

              r1
            
      |RCE| 2.2.7 |RNS|

      -----------------

      General

      ^^^^^^^

       * 2015-02-03

      Fixes

      ^^^^^

       * Security: fixed severe issue with leaking of auth_tokens(api_keys) on the

         following API calls; ``get_repo``,

         ``update_repo``, ``get_locks``, and ``get_user_groups``.

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

marcink project: added all source files and assets	r1	\|RCE\| 2.2.7 \|RNS\|
		-----------------

		General
		^^^^^^^
		* 2015-02-03

		Fixes
		^^^^^

		* Security: fixed severe issue with leaking of auth_tokens(api_keys) on the
		following API calls; ``get_repo``,
		``update_repo``, ``get_locks``, and ``get_user_groups``.