summaryrefslogtreecommitdiff
path: root/doc/news
diff options
context:
space:
mode:
authorGravatar Joey Hess <joeyh@joeyh.name>2017-08-18 11:21:11 -0400
committerGravatar Joey Hess <joeyh@joeyh.name>2017-08-18 11:21:11 -0400
commit3a0ae78d2f8c2530677ec3ee611bfdeca08debe8 (patch)
tree2388578ed7ad9c2dec57798c4ea6ad93f8ca2668 /doc/news
parentfdc4c44671011278e2e95d8bd13b1b4249846968 (diff)
add note about security fix
Diffstat (limited to 'doc/news')
-rw-r--r--doc/news/version_6.20170818.mdwn6
1 files changed, 5 insertions, 1 deletions
diff --git a/doc/news/version_6.20170818.mdwn b/doc/news/version_6.20170818.mdwn
index 26bc7c1a2..09cb8172a 100644
--- a/doc/news/version_6.20170818.mdwn
+++ b/doc/news/version_6.20170818.mdwn
@@ -1,3 +1,7 @@
+**Note** this is a security fix release. While the security
+hole needs perhaps some social engineering to exploit, a prompt upgrade is
+strongly recommended.
+
git-annex 6.20170818 released with [[!toggle text="these changes"]]
[[!toggleable text="""
* Security fix: Disallow hostname starting with a dash, which
@@ -39,4 +43,4 @@ git-annex 6.20170818 released with [[!toggle text="these changes"]]
* Fix the external special remotes git-annex-remote-ipfs,
git-annex-remote-torrent and the example.sh template to correctly
support filenames with spaces.
- * Windows: Win32 package has subsumed Win32-extras; update dependency."""]] \ No newline at end of file
+ * Windows: Win32 package has subsumed Win32-extras; update dependency."""]]