b657242f5d
Leveraged the existing verification code by making it also check the retrievalSecurityPolicy. Also, prevented getViaTmp from running the download action at all when the retrievalSecurityPolicy is going to prevent verifying and so storing it. Added annex.security.allow-unverified-downloads. A per-remote version would be nice to have too, but would need more plumbing, so KISS. (Bill the Cat reference not too over the top I hope. The point is to make this something the user reads the documentation for before using.) A few calls to verifyKeyContent and getViaTmp, that don't involve downloads from remotes, have RetrievalAllKeysSecure hard-coded. It was also hard-coded for P2P.Annex and Command.RecvKey, to match the values of the corresponding remotes. A few things use retrieveKeyFile/retrieveKeyFileCheap without going through getViaTmp. * Command.Fsck when downloading content from a remote to verify it. That content does not get into the annex, so this is ok. * Command.AddUrl when using a remote to download an url; this is new content being added, so this is ok. This commit was sponsored by Fernando Jimenez on Patreon.
102 lines
4.1 KiB
Text
102 lines
4.1 KiB
Text
git-annex (6.20180622) upstream; urgency=high
|
|
|
|
A security fix has changed git-annex to refuse to download content from
|
|
some special remotes when the content cannot be verified with a hash check.
|
|
In particular URL and WORM keys stored on such remotes won't be downloaded.
|
|
See the documentation of the annex.security.allow-unverified-downloads
|
|
configuration for how to deal with this if it affects your files.
|
|
|
|
A security fix has changed git-annex to only support http, https, and ftp
|
|
URL schemes by default. You can enable other URL schemes, at your own risk,
|
|
using annex.security.allowed-url-schemes.
|
|
|
|
A related security fix prevents git-annex from connecting to http
|
|
servers (and proxies) on localhost or private networks. This can
|
|
be overridden, at your own risk, using annex.security.allowed-http-addresses.
|
|
|
|
Setting annex.web-options no longer is enough to make curl be used,
|
|
and youtube-dl is also no longer used by default. See the
|
|
documentation of annex.security.allowed-http-addresses for
|
|
details and how to enable them.
|
|
|
|
The annex.web-download-command configuration has been removed,
|
|
use annex.web-options instead.
|
|
|
|
-- Joey Hess <id@joeyh.name> Fri, 15 Jun 2018 17:54:23 -0400
|
|
|
|
git-annex (6.20180309) upstream; urgency=medium
|
|
|
|
Note that, due to not using rsync to transfer files over ssh
|
|
any longer, permissions and other file metadata of annexed files
|
|
will no longer be preserved when copying them to and from ssh remotes.
|
|
Other remotes never supported preserving that information, so
|
|
this is not considered a regression.
|
|
|
|
-- Joey Hess <id@joeyh.name> Fri, 09 Mar 2018 13:22:47 -0400
|
|
|
|
git-annex (6.20170228) upstream; urgency=medium
|
|
|
|
This version of git-annex has mitigations for SHA1 hash collision
|
|
problems.
|
|
|
|
A new annex.securehashesonly configuration, when used in combination with
|
|
signed git commits, avoids potential hash collision problems in git-annex
|
|
repositories. For details, see this web page:
|
|
<https://git-annex.branchable.com/tips/using_signed_git_commits/>
|
|
|
|
-- Joey Hess <id@joeyh.name> Tue, 28 Feb 2017 13:28:50 -0400
|
|
|
|
git-annex (6.20170101) upstream; urgency=medium
|
|
|
|
XMPP support has been removed from the assistant in this release.
|
|
|
|
If your repositories used XMPP to keep in sync, that will no longer
|
|
work, and you should enable some other remote to keep them in sync.
|
|
A ssh server is one way, or use the new Tor pairing feature.
|
|
|
|
-- Joey Hess <id@joeyh.name> Tue, 27 Dec 2016 16:37:46 -0400
|
|
|
|
git-annex (4.20131002) upstream; urgency=low
|
|
|
|
The layout of gcrypt repositories has changed, and
|
|
if you created one you must manually upgrade it.
|
|
See /usr/share/doc/git-annex/html/upgrades/gcrypt.html
|
|
|
|
-- Joey Hess <joeyh@debian.org> Tue, 24 Sep 2013 13:55:23 -0400
|
|
|
|
git-annex (3.20120123) upstream; urgency=low
|
|
|
|
There was a bug in the handling of directory special remotes that
|
|
could cause partial file contents to be stored in them. If you use
|
|
a directory special remote, you should fsck it, to avoid potential
|
|
data loss.
|
|
|
|
Example: git annex fsck --from mydirectory
|
|
|
|
-- Joey Hess <joeyh@debian.org> Thu, 19 Jan 2012 15:24:23 -0400
|
|
|
|
git-annex (3.20110624) upstream; urgency=low
|
|
|
|
There has been another change to the git-annex data store.
|
|
Use `git annex upgrade` to migrate your repositories to the new
|
|
layout. See <http://git-annex.branchable.com/upgrades/> or
|
|
/usr/share/doc/git-annex/html/upgrades.html
|
|
|
|
The significant change this time is that the .git-annex/ directory
|
|
is gone; instead there is a git-annex branch that is automatically
|
|
maintained by git-annex, and encapsulates all its state nicely out
|
|
of your way.
|
|
|
|
You should make sure you include the git-annex branch when
|
|
git pushing and pulling.
|
|
|
|
-- Joey Hess <joeyh@debian.org> Tue, 21 Jun 2011 20:18:00 -0400
|
|
|
|
git-annex (0.20110316) upstream; urgency=low
|
|
|
|
This version reorganises the layout of git-annex's files in your repository.
|
|
There is an upgrade process to convert a repository from the old git-annex
|
|
to this version. See <http://git-annex.branchable.com/upgrades/> or
|
|
/usr/share/doc/git-annex/html/upgrades.html
|
|
|
|
-- Joey Hess <joeyh@debian.org> Wed, 16 Mar 2011 15:49:15 -0400
|