1. 16 Dec, 2009 2 commits
  2. 15 Dec, 2009 2 commits
    • Jim Fulton's avatar
      New Feature: · cdb94c28
      Jim Fulton authored
      - The standard storages, FileStorage, ClientStorage, DemoStorage, and
        MappingStorage now allow the version argument to history and load to
        be ommitted.  This is to make it easier to write application code
        that works with ZODB 3.8 and later versions, which don't support
        versions.
      cdb94c28
    • Jim Fulton's avatar
      Bug Fixed: · 3550df2a
      Jim Fulton authored
      - A ZEO threading bug could cause transactions to read inconsistent
        data.  (This sometimes caused an AssertionError in
        Connection._setstate_noncurrent.)
      3550df2a
  3. 13 Nov, 2009 1 commit
  4. 01 Oct, 2009 4 commits
  5. 01 Sep, 2009 1 commit
    • Jim Fulton's avatar
      Bugs Fixed: · fdcd5adf
      Jim Fulton authored
      - CVE-2009-2701: Fixed a vulnerability in ZEO storage servers when
        blobs are available. Someone with write access to a ZEO server
        configured to support blobs could read any file on the system
        readable by the server process and remove any file removable by the
        server process.
      fdcd5adf
  6. 31 Aug, 2009 1 commit
  7. 23 Aug, 2009 2 commits
  8. 15 Aug, 2009 1 commit
  9. 14 Aug, 2009 1 commit
    • Jim Fulton's avatar
      New Feature: · de8d3c41
      Jim Fulton authored
      - There's a new utility script, strip_versions that strips version
        data from storages. This is needed to prepare databases containing
        version records for using ZODB 3.9, which no-longer supports
        versions.
      de8d3c41
  10. 13 Aug, 2009 1 commit
    • Jim Fulton's avatar
      Bugs Fixed: · ada16446
      Jim Fulton authored
      - Fixed vulnerabilities in the ZEO network protocol that allow:
      
      CVE-2009-0668 Arbitrary Python code execution in ZODB ZEO storage servers
        CVE-2009-0669 Authentication bypass in ZODB ZEO storage servers
      
      - Limit the number of object ids that can be allocated at once to
        avoid running out of memory.
      ada16446
  11. 11 May, 2009 1 commit
  12. 08 May, 2009 1 commit
  13. 19 Dec, 2008 1 commit
    • Jim Fulton's avatar
      Restored some tests that had been inadvertantly disabled in a branh · 53f94301
      Jim Fulton authored
      merge a couple of years ago.  Fortunately, they still pass, so no new
      release is indicated.
      
      I didn't restore and removed one silly test class, OneTimeTests,
      related to obsolete packing issues.
      
      I didn't restore and removed another silly test class,
      DemoStorageWrappedAroundClientStorage, because it is an error to wrap
      a demo storage around a client storage. A DemoStorage should only wrap
      a storage who's data never changes.
      53f94301
  14. 13 Dec, 2008 1 commit
  15. 17 Nov, 2008 1 commit
  16. 17 Oct, 2008 1 commit
  17. 16 Oct, 2008 1 commit
  18. 13 Oct, 2008 1 commit
  19. 12 Oct, 2008 2 commits
  20. 11 Oct, 2008 1 commit
  21. 10 Oct, 2008 1 commit
  22. 07 Oct, 2008 2 commits
  23. 06 Oct, 2008 2 commits
  24. 26 Sep, 2008 1 commit
  25. 24 Sep, 2008 2 commits
  26. 23 Sep, 2008 2 commits
  27. 22 Sep, 2008 1 commit
  28. 19 Sep, 2008 2 commits