Skip to content

25.6.3

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Oct 00:08
25.6.3
d9146a4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

SECURITY ISSUE

  • NOTE: This release fixes 2 security issues in Ascender. Oauth tokens were not being deactivated properly and Application owners could take over tokens
    See #1149
    Thanks to Quanah Gibson-Mount @quanah for finding and responsibly reporting these.

New Features

  • Add ID column to Jobs list (#1122)
  • perf: read one key to decide the settings cache is stale (#947)
  • perf: let a web process reuse its database connection (#946)
  • perf: stream the task manager's pending queue in chunks instead of loading every job (#922)

Bug Fixes

  • SECURITY: Refuse OAuth2 access for deactivated users and stop application owners taking over tokens
  • Optimize relinking of orphaned job host summaries (#1144)
  • Fix fact caching with ansible-core 2.19+ and stop fact updates leaking across inventories (#1126)
  • fix: backfill finished on terminal jobs that never started (#1057)
  • Split a comma-separated limit when pre-filtering federated inventories (#1115)
  • Release the connection lock before handing out pg_notify events (#1102)
  • A few css updates, missed CSS import (#1065)
  • Issue 1014 - LOGIN_REDIRECT_OVERRIDE now requires a POST (#1051)
  • fix: saving a workflow fails on a node added and deleted before the first save (#1012)
  • Revert parts of 343 as all jobs should have a finished time (#1020)
  • Fix survey multiple-choice default toggle always looking checked (#1013)
  • Groups for Federated Inventories should be treated same as Constructed (#999)
  • Fix text coloring in Classic theme About page (#1086)
  • Fix the text color for the Launch Wizard for the current selection (#907)
  • ResizeObserver loop completed with undelivered notifications (#815)
  • Fix issue with Workflow Approval Context not showing (#913)

Backend Upgrades

  • refactor: trigger PagerDuty incidents with one POST (#924)
  • refactor: speak IRC directly instead of through the irc package (#923)
  • Replace ASN1 with Cryptography ASN1 function (#921)
  • build: pin the two git requirements to commits (#928)

Upstream Patches

  • Upstream 16673 - Harden notification backends against redirect-based credential leakage (#1056)
  • Upstream 16676 - Enforce read permission check on copy API endpoint (#1066)

Security Fixes

Full Changelog: 25.6.2...25.6.3

Contributors

quanah
Assets 2
Loading