--- - branch: MAIN date: Thu Aug 7 02:37:00 UTC 2014 files: - new: '1.4' old: '1.3' path: pkgsrc/net/py-celery/Makefile pathrev: pkgsrc/net/py-celery/Makefile@1.4 type: modified - new: '1.2' old: '1.1' path: pkgsrc/net/py-celery/distinfo pathrev: pkgsrc/net/py-celery/distinfo@1.2 type: modified id: 20140807T023700Z.bc4b10815b3c5dac548ece2b305d7d3b8acb2cd9 log: | 3.1.13 ====== Security Fixes -------------- * [Security: `CELERYSA-0002`_] Insecure default umask. The built-in utility used to daemonize the Celery worker service sets an insecure umask by default (umask 0). This means that any files or directories created by the worker will end up having world-writable permissions. Special thanks to Red Hat for originally discovering and reporting the issue! This version will no longer set a default umask by default, so if unset the umask of the parent process will be used. .. _`CELERYSA-0002`: http://github.com/celery/celery/tree/master/docs/sec/CELERYSA-0002.txt News ---- - **Requirements** - Now depends on :ref:`Kombu 3.0.21 `. - Now depends on :mod:`billiard` 3.3.0.18. - **App**: ``backend`` argument now also sets the :setting:`CELERY_RESULT_BACKEND` setting. - **Task**: ``signature_from_request`` now propagates ``reply_to`` so that the RPC backend works with retried tasks - **Task**: ``retry`` will no longer attempt to requeue the task if sending the retry message fails. Unrelated exceptions being raised could cause a message loop, so it was better to remove this behavior. - **Beat**: Accounts for standard 1ms drift by always waking up 0.010s earlier. This will adjust the latency so that the periodic tasks will not move 1ms after every invocation. - Documentation fixes - **Worker**: Removed an outdated assert statement that could lead to errors being masked module: pkgsrc subject: 'CVS commit: pkgsrc/net/py-celery' unixtime: '1407379020' user: rodent