mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

add note about security fix

Browse source
This commit is contained in:
Joey Hess 2017-08-18 11:21:11 -04:00
parent 33153ca919
commit 0fce5ac3ad
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
doc/news/version_6.20170818.mdwn
View file

@ -1,3 +1,7 @@
**Note** this is a security fix release. While the security
hole needs perhaps some social engineering to exploit, a prompt upgrade is
strongly recommended.
git-annex 6.20170818 released with [[!toggle text="these changes"]]
[[!toggleable text="""
* Security fix: Disallow hostname starting with a dash, which
@ -39,4 +43,4 @@ git-annex 6.20170818 released with [[!toggle text="these changes"]]
* Fix the external special remotes git-annex-remote-ipfs,
git-annex-remote-torrent and the example.sh template to correctly
support filenames with spaces.
* Windows: Win32 package has subsumed Win32-extras; update dependency."""]]
* Windows: Win32 package has subsumed Win32-extras; update dependency."""]]