github spotify/luigi 2.1.1
Version 2.1.1 (Includes security fix)

latest releases: 3.5.0, 3.4.0, 3.3.0...
8 years ago

Last release was only 2 business days ago (as opposed to the 5 months since the one before it). But this release got rushed as of a security fix!

In addition to doc fixes:

Additions

Security bugfix

  • The server now have an explicit whitelist of external commands.
    • Previous potential harm: Malicious hackers can run arbitrary code if they have file system (even external mounts!)+network access on the machine running luigid (executed by the user that you run luigid with).

We wait for a while with saying how to use this exploit, giving time to people to apply the bugfix.

Don't miss a new luigi release

NewReleases is sending notifications on new releases.