Koji 1.23.1 is out. Another minor update. So, the update should be
straightforward (no db schema changes) and safe for everybody. End-users
(CLI) are encouraged to update too as there are also minor client-side
fixes.
IMPORTANT: web ui has security fix for CVE-2020-15856 (XSS vulnerability),
so those who are running web frontend should upgrade. There are also
updates 1.21.2 and koji 1.22.2 containing this fix so if you're running an
older version you still have the possibility to update. For even older
releases merge https://pagure.io/koji/pull-request/2652.
Thanks to everyone who contributed!
You can read the release notes here:
https://docs.pagure.org/koji/release_notes/release_notes_1.23.1/
<https://docs.pagure.org/koji/release_notes/release_notes_1.22.1/>
Highlights:
- CVE fix
- 32-bit installation fix
- python 2.7 compatibility backport (timezones)
- improved detection on external repo changes in kojira
- new docs
- 20 issues fixed
You can view the 1.23.1 roadmap at https://pagure.io/koji/roadmap/1.23.1/
<https://pagure.io/koji/roadmap/1.22.1/>
For the current roadmap, see https://pagure.io/koji/roadmap
You can download this and other releases at https://pagure.io/koji/releases
See you again with major release 1.24 in ~two months!
--
Tomas Kopecek <tkopecek(a)redhat.com>
RHEL Build Development, RedHat
