{"push_id":1203491224,"size":9,"distinct_size":2,"ref":"refs/heads/15653","head":"d1479b07a1b0c237cd1384ad3aa677c78068dcfc","before":"772978b61a41670f3767f7f2207af521772ddcda","commits":[{"sha":"d89ca4362da4c97427a47d10276ee2a691dd11f2","author":{"name":"Dominic Cleal","email":"ead4b80d946ef79edf6366c48ebc9399bb491407@cleal.org"},"message":"fixes #15659 - replace deprecated Object#timeout call","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/d89ca4362da4c97427a47d10276ee2a691dd11f2"},{"sha":"2432eb5c6896683d49c22e2fe04f7cc9e3777eb9","author":{"name":"Ori Rabin","email":"8e7a81601e4f9685aefe30c2762c407519245d42@redhat.com"},"message":"Fixes #15629 - parameters form shows new parameters after error","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/2432eb5c6896683d49c22e2fe04f7cc9e3777eb9"},{"sha":"c3c186de12be15e55d9582e54659f765304a1073","author":{"name":"Lukas Zapletal","email":"fe3c052617b42561139fc268baac564491adee75@redhat.com"},"message":"Fixes #15490 - adding view_host filter and better msg\n\nUsers who are logged in with permissions to view some hosts are able to\npreview provisioning templates for any host by specifying its hostname\nin the URL, as the specific view_hosts permissions and filters aren't\nchecked. If the organization or location features are enabled, the user\nwill still be restricted to their associated orgs/locs.\n\nThis can disclose configuration information about the host, including\nroot password hashes if used in preseed/kickstart templates.","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/c3c186de12be15e55d9582e54659f765304a1073"},{"sha":"cf37d1f470c6eb898b65f0355360684abbabde16","author":{"name":"Shlomi Zadok","email":"857169dd5a058bfaaadae8131efc5b37d8f39e94@ben-hanna.com"},"message":"Fixes #15655 - Improve ptable migration\n\nUpdate host and hostgroups in migration without running validation. Some\nplugins failed to run the migration because Host or Hostgroups added\nvalidations for fields that did not exist at the time this migration was\ncreated.\nThis change also improves performance of the migration by using the\n`update_all` method instead of looping over all elements.","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/cf37d1f470c6eb898b65f0355360684abbabde16"},{"sha":"72e9afe43d6c665ee9a2e8acdef5db91f5e5fdad","author":{"name":"Ivan Nečas","email":"4146251cddbfa61bf2118072f93bb6cf8cb1e2a7@redhat.com"},"message":"Fixes #15134 - wait for ajax in interface test\n\nOtherwise the form changes during the 'Ok' button click and causes\nintermittent issues.","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/72e9afe43d6c665ee9a2e8acdef5db91f5e5fdad"},{"sha":"79c0664a008afe0fea54a0b5256426f3867a02bc","author":{"name":"Timo Goebel","email":"8000f67197046a0daec91e52660ff9150defe07c@dm.de"},"message":"fixes #14666 - support IPv6 in UI","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/79c0664a008afe0fea54a0b5256426f3867a02bc"},{"sha":"714a42c51d2bb6e2e61b4b99fb7183573e8bfd1c","author":{"name":"Ashish Humbe","email":"e38e57be020faea823a7a305f6023eb854101a6b@redhat.com"},"message":"Fixes #14720 - Handling invalid email from auth source","distinct":false,"url":"https://api.github.com/repos/dLobatog/foreman/commits/714a42c51d2bb6e2e61b4b99fb7183573e8bfd1c"},{"sha":"4eeea97393e19327f39002e86f0fb4f97415cc1a","author":{"name":"Justin Sherrill","email":"95b30afa1d0eae58e911a726770e3583aefa0e98@redhat.com"},"message":"Fixes #11749 - puppet env jquery selector more restrictive\n\nThis current jquery selector for puppet environment\nselection would match any select box where name\nincluded environment_id.  This caused issues with\nkatello as we put a field containing lifecycle_environment_id\nin the form","distinct":true,"url":"https://api.github.com/repos/dLobatog/foreman/commits/4eeea97393e19327f39002e86f0fb4f97415cc1a"},{"sha":"d1479b07a1b0c237cd1384ad3aa677c78068dcfc","author":{"name":"Daniel Lobato","email":"b1b7eacd74b336191915142d928afac31a4aa2f1@gmail.com"},"message":"Fixes #15653 - CVE-2016-5390 fix permissions for host API\n\nNon-admin users with the view_hosts permission containing a filter are\nable to access API routes beneath \"hosts\" such as GET\n/api/v2/hosts/secrethost/interfaces without the filter being taken into\naccount. This allows users to access network interface details\n(including BMC login details) for any host.\n\nThe filter is only correctly used when accessing the main host details\n(/api/v2/hosts/secrethost). Access to the \"nested\" routes, which\nincludes interfaces, reports, parameters, audits, facts and Puppet\nclasses, is not authorized beyond requiring any view_hosts permission.","distinct":true,"url":"https://api.github.com/repos/dLobatog/foreman/commits/d1479b07a1b0c237cd1384ad3aa677c78068dcfc"}]}
{"actor":{"display_login":"dLobatog"}}