From 0fce5ac3ad53758becd4531e8ae5da7e86bc5dd8 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Fri, 18 Aug 2017 11:21:11 -0400 Subject: [PATCH] add note about security fix --- doc/news/version_6.20170818.mdwn | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/news/version_6.20170818.mdwn b/doc/news/version_6.20170818.mdwn index 26bc7c1a26..09cb8172a3 100644 --- a/doc/news/version_6.20170818.mdwn +++ b/doc/news/version_6.20170818.mdwn @@ -1,3 +1,7 @@ +**Note** this is a security fix release. While the security +hole needs perhaps some social engineering to exploit, a prompt upgrade is +strongly recommended. + git-annex 6.20170818 released with [[!toggle text="these changes"]] [[!toggleable text=""" * Security fix: Disallow hostname starting with a dash, which @@ -39,4 +43,4 @@ git-annex 6.20170818 released with [[!toggle text="these changes"]] * Fix the external special remotes git-annex-remote-ipfs, git-annex-remote-torrent and the example.sh template to correctly support filenames with spaces. - * Windows: Win32 package has subsumed Win32-extras; update dependency."""]] \ No newline at end of file + * Windows: Win32 package has subsumed Win32-extras; update dependency."""]]