Thu, 22 Jan 2015 17:18:20 +0100 merge 3.18.8 into 3.19 branch
Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 17:18:20 +0100] rev 10156
merge 3.18.8 into 3.19 branch
Thu, 22 Jan 2015 17:12:44 +0100 Added tag cubicweb-version-3.18.8, cubicweb-debian-version-3.18.8-1, cubicweb-centos-version-3.18.8-1 for changeset 231094063d62 stable
Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 17:12:44 +0100] rev 10155
Added tag cubicweb-version-3.18.8, cubicweb-debian-version-3.18.8-1, cubicweb-centos-version-3.18.8-1 for changeset 231094063d62
Thu, 22 Jan 2015 16:41:27 +0100 [pkg] 3.18.8 stable cubicweb-centos-version-3.18.8-1 cubicweb-debian-version-3.18.8-1 cubicweb-version-3.18.8
Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 16:41:27 +0100] rev 10154
[pkg] 3.18.8
Wed, 21 Jan 2015 15:58:33 +0100 [security] Test case and fix for an INSERT security hole stable
Julien Cristau <julien.cristau@logilab.fr> [Wed, 21 Jan 2015 15:58:33 +0100] rev 10153
[security] Test case and fix for an INSERT security hole 7099bbd685aa introduced a untested corner case in which an Entity with no attribute specified could be created whatever the permissions. Report and test case by Christophe de Vienne, fix by Aurelien Campeas. Thanks! Closes #4854359
(0) -10000 -3000 -1000 -300 -100 -30 -10 -4 +4 +10 +30 +100 +300 +1000 tip