ReleaseNotes-2.7.1

#
# openSUSE Build Service 2.7.1
#

Updaters from OBS 2.7.0 release can just ugrade the packages
and restart all services. Updaters from former releases should
read the README.UPDATERS file.

This is in first place a bugfix release focusing on security issues

Feature backports:
==================

* none

Changes:
========

* none

Bugfixes:
=========

* [webui][api] Update rails to version 4.2.7.1 to fix CVE-2016-6316 and CVE-2016-6317
* [webui] Users in not 'confirmed' state were allowed to login

* [api] Users in not 'confirmed' state were allowed to run services via former created token

* [backend] Fixing project copy which includes binaries
* [backend] worker supports jobs from OBS 2.8 scheduler
* [backend] support publishing of .vdi (VirtualBox image) files