add note about security fix

This commit is contained in:
Joey Hess 2017-08-18 11:21:11 -04:00
parent 33153ca919
commit 0fce5ac3ad
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38

View file

@ -1,3 +1,7 @@
**Note** this is a security fix release. While the security
hole needs perhaps some social engineering to exploit, a prompt upgrade is
strongly recommended.
git-annex 6.20170818 released with [[!toggle text="these changes"]]
[[!toggleable text="""
* Security fix: Disallow hostname starting with a dash, which
@ -39,4 +43,4 @@ git-annex 6.20170818 released with [[!toggle text="these changes"]]
* Fix the external special remotes git-annex-remote-ipfs,
git-annex-remote-torrent and the example.sh template to correctly
support filenames with spaces.
* Windows: Win32 package has subsumed Win32-extras; update dependency."""]]
* Windows: Win32 package has subsumed Win32-extras; update dependency."""]]