Monday, August 28, 2017
1 change · master
Security fixes and vulnerability patches
This update removes an unsafe data storage format from several Odoo areas and replaces it with safer alternatives. It also reorganizes how user defaults and action links are stored, improving security and maintainability while affecting configuration behavior across multiple business apps.
Original PR description
The Python module `pickle` is a security weakness. Remove its usage in Odoo modules `anonymization`. `pos_cache` and model `ir.values`. The latter has been split into a model `ir.default` for user-defined defaults and fields `binding_model_id` and `binding_type` for action bindings.