##// END OF EJS Templates
mercurial: protocol security updates....
mercurial: protocol security updates. - fixes Mercurial CVE for lack of permissions checking on mercurial batch commands - more strict checks for permissions, now default to push instead of pull to be always on safe side. - decypher batch commands and pick top-most permission to be used

File last commit:

r2267:082277f4 stable
r2724:7a057a98 default
Show More
release-notes-4.10.6.rst
52 lines | 1.0 KiB | text/x-rst | RstLexer

|RCE| 4.10.6 |RNS|

Release Date

  • 2017-12-20

New Features

General

  • dependencies: bump webob to 1.7.4 that fixes 1.7.3 regression for streaming.
  • svn: extend detection of SVN PROPFIND/PROPATCH methods. This increases the compatibility with svn methods such as svn mkdir or svn delete with tortoise SVN.

Security

Performance

  • hooks: decrease pool interval to 10ms. For SVN operations and lots of requests this can lead to almost 4x speed improvement.

Fixes

  • celery: fix potential 404 problems with celery and sync creation of repositories.
  • fixed git streaming support for instance that are not behind a buffering proxies. Webob library removed default chunked encoding support, and now requires an explicit flag to make it work again.

Upgrade notes

  • Fixed regression with streaming, and increased svn support. No upgrade problems should be expected, however please check GIT repos behaviour on upgrade.