=======================
Pulp 2.16 Release Notes
=======================

Pulp 2.16.4
===========

Bug Fixes
---------

See the list of :fixedbugs_pulp:`2.16.4`


Pulp 2.16.2
===========

Bug Fixes
---------

See the full list of :fixedbugs_pulp:`2.16.2`


* Security fix: `Issue 3521 <https://github.com/pulp/pulp/pull/3513>`_

  * `CVE-2018-1090 <https://nvd.nist.gov/vuln/detail/CVE-2018-1090>`_
  * The `last_override_config` field on importers and distributors was serialized via the Rest API
    and potentially included sensitive information. With this release, that field no longer
    reports the information saved in the database. Instead it will always show as::

    'last_override_config': {}

* Fixes toward supporting a FIPS enabled system:

 * `Issue 3768 <https://pulp.plan.io/issues/3768>`_
 * `Issue 3646 <https://pulp.plan.io/issues/3646>`_
 * `Issue 3676 <https://pulp.plan.io/issues/3676>`_

* Greatly improved performance for orphan cleanup. `Issue 3663
  <https://pulp.plan.io/issues/3663>`_.


Pulp 2.16.1
===========

Bug Fixes
---------

See the list of :fixedbugs_pulp:`2.16.1`


Pulp 2.16.0
===========

New Features
------------

* Added a `worker_timeout` config setting for users to customize when Pulp should consider workers
  are dead and attempt to kill them.

Upgrade instructions
--------------------

Upgrade using the normal process::

    $ sudo systemctl stop httpd pulp_workers pulp_resource_manager pulp_celerybeat pulp_streamer goferd
    $ sudo yum upgrade
    $ sudo -u apache pulp-manage-db
    $ sudo systemctl start httpd pulp_workers pulp_resource_manager pulp_celerybeat pulp_streamer goferd

``pulp_streamer`` and ``goferd`` should be omitted if those services are not installed.