add link to advistory

This commit is contained in:
Joey Hess 2018-06-22 10:27:22 -04:00
parent 3976b89116
commit dab55715da
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38

View file

@ -1,6 +1,7 @@
git-annex (6.20180626) upstream; urgency=high
Security fix release for CVE-2018-10857 and CVE-2018-10859
https://git-annex.branchable.com/security/CVE-2018-10857_and_CVE-2018-10859/
* Refuse to download content, that cannot be verified with a hash,
from encrypted special remotes (for CVE-2018-10859),