mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

reorg

Browse source
This commit is contained in:
Joey Hess 2017-02-27 15:04:03 -04:00
parent 49114cf4ea
commit 9db064f50c
No known key found for this signature in database
GPG key ID: C910D9222512E3C7
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
CHANGELOG
View file

@ -5,6 +5,11 @@ git-annex (6.20170215) UNRELEASED; urgency=medium
This does not prevent the git repository from containing links This does not prevent the git repository from containing links
to insecure hashes, but it does prevent the content of such files to insecure hashes, but it does prevent the content of such files
from being added to .git/annex/objects by any method. from being added to .git/annex/objects by any method.
* Tighten key parser to prevent SHA1 collision attacks generating
two keys that have the same SHA1. (Only done for keys that contain
a hash). This ensures that signed git commits of annexed files
will remain secure, as long as git-annex is using a secure hashing
backend.
* fsck: Warn about any files whose content is present, that don't * fsck: Warn about any files whose content is present, that don't
use secure hashes, when annex.securehashesonly is set. use secure hashes, when annex.securehashesonly is set.
* Added --securehash option to match files using a secure hash function, * Added --securehash option to match files using a secure hash function,
@ -42,11 +47,6 @@ git-annex (6.20170215) UNRELEASED; urgency=medium
to wget, since curl is able to display only errors to stderr, unlike to wget, since curl is able to display only errors to stderr, unlike
wget. wget.
* status: Pass --ignore-submodules=when option on to git status. * status: Pass --ignore-submodules=when option on to git status.
* Tighten key parser to prevent SHA1 collision attacks generating
two keys that have the same SHA1. (Only done for keys that contain
a hash). This ensures that signed git commits of annexed files
will remain secure, as long as git-annex is using a secure hashing
backend.
* Removed support for building with the old cryptohash library. * Removed support for building with the old cryptohash library.
Building with that library made git-annex not support SHA3; it's time Building with that library made git-annex not support SHA3; it's time
for that to always be supported in case SHA2 dominoes. for that to always be supported in case SHA2 dominoes.