Project

General

Profile

Statistics
| Branch: | Tag: | Revision:

Latest revisions

# Date Author Comment
358ec5a3 01/20/2013 10:06 AM Dominic Cleal

fixes #2121, #2069 - restrict importers and ENC to puppetmasters and users

CVE-2013-0171: report and fact importers parse YAML directly from the remote
host without authentication. Untrusted YAML can instantiate objects and be
used to exploit Foreman.

CVE-2013-0174: external nodes (ENC) output is available to any source and...

958d69cd 01/14/2013 01:24 PM Dmitri Dolguikh

v2 api for configuration_templates and template_combinations

d4e8938a 12/26/2012 09:58 AM Ohad Levy

fixes #1944 - Listing VMWare virtual machines under Computer resources is slow.

8838eb42 12/26/2012 08:49 AM Ohad Levy

fixes #1814 - converts sp_* attributes into a BMC interface class

this patch also includes the following

  • added a new interfaces table, and STI objects to represent a NIC, BMC, Managed
    and a bootable interface.
  • refactored DHCP/DNS orchestation code, so they can work on the...
8dc8a9ac 12/24/2012 10:57 AM Joseph Magen

fixes #1890 api host status

71291a46 12/20/2012 04:18 AM Dmitri Dolguikh

fixes #1834 to get foreman running under ruby 1.9.3

f528f158 12/12/2012 10:03 AM Joseph Magen

added compute resource actions and tests

25d4ca6d 12/11/2012 03:57 AM Joseph Magen

host routes api changes squashed

6670e58c 12/02/2012 08:07 AM Ivan Necas

Clear the thread values outside of handling request

Adding an around filter to clear the thread values. Without this there
is a risk that the thread value from previous request will be used in
other request, which can lead to security issues.

We clear the current user at the beginning of the request (except the...

7838d170 12/02/2012 08:07 AM Ivan Necas

Fix inter-test dependencies

After the thread clean-up, some tests were failing because they
implicitly expected User.current to be set. Stating the dependencies
explicitly.

View revisions

Also available in: Atom