u/pc/rhodecode-enterprise-ce-fork-pc Files · docs/release-notes/release-notes-4.11.6.rst

shadow-repos: use safer way to destroy shadow repositories....

shadow-repos: use safer way to destroy shadow repositories. we had reported errors on removal of shadow repos. Not reproduced, however suspecting are filesystem sync/symlink race-conditions on shared storage. End result were existing shadow-repo directories that tricked rhodecode into thinking shadow repos is existing, but infact it was a dummy structure semi-removed. Using shutil.move we ENSURE rhodecode doesn't read those back even if removal fails.

marcink - - Load All Authors

File last commit:

r2665:f42f8690 stable


                r2791:27d869d5

stable

Download file

             release-notes-4.11.6.rst
        
                    41 lines
            
             | 489 B
            
                | text/x-rst
            
             |
                RstLexer
            
             / docs / release-notes / release-notes-4.11.6.rst
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        marcink
    
docs: added 4.11.6 release notes

              r2665
            
      |RCE| 4.11.6 |RNS|

      ------------------

      Release Date

      ^^^^^^^^^^^^

      - 2018-03-28

      New Features

      ^^^^^^^^^^^^

      General

      ^^^^^^^

      Security

      ^^^^^^^^

      - api(high): fixed unauthorized access to repositories using forged api requests.

      Performance

      ^^^^^^^^^^^

      Fixes

      ^^^^^

      Upgrade notes

      ^^^^^^^^^^^^^

      - Unscheduled security release addressing found vulnerability in the API that

        allows attackers to gain access to repositories in unauthorized way by forging

        data in the API request.

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

marcink docs: added 4.11.6 release notes	r2665	\|RCE\| 4.11.6 \|RNS\|
		------------------

		Release Date
		^^^^^^^^^^^^

		- 2018-03-28


		New Features
		^^^^^^^^^^^^



		General
		^^^^^^^



		Security
		^^^^^^^^

		- api(high): fixed unauthorized access to repositories using forged api requests.


		Performance
		^^^^^^^^^^^



		Fixes
		^^^^^



		Upgrade notes
		^^^^^^^^^^^^^

		- Unscheduled security release addressing found vulnerability in the API that
		allows attackers to gain access to repositories in unauthorized way by forging
		data in the API request.