-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 19 Sep 2014 12:53:42 -0400 Source: git-annex Binary: git-annex Architecture: source amd64 Version: 5.20140919 Distribution: unstable Urgency: high Maintainer: Joey Hess <joeyh@debian.org> Changed-By: Joey Hess <joeyh@debian.org> Description: git-annex - manage files with git, without checking their contents into git Closes: 761261 Changes: git-annex (5.20140919) unstable; urgency=high . * Security fix for S3 and glacier when using embedcreds=yes with encryption=pubkey or encryption=hybrid. CVE-2014-6274 The creds embedded in the git repo were *not* encrypted. git-annex enableremote will warn when used on a remote that has this problem. For details, see: https://git-annex.branchable.com/upgrades/insecure_embedded_creds/ * assistant: Detect when repository has been deleted or moved, and automatically shut down the assistant. Closes: #761261 * Windows: Avoid crashing trying to list gpg secret keys, for gcrypt which is not yet supported on Windows. * WebDav: Fix enableremote crash when the remote already exists. (Bug introduced in version 5.20140817.) * add: In direct mode, adding an annex symlink will check it into git, as was already done in indirect mode. Checksums-Sha1: cdeecb1f071a332ba5dff49ec7c74673f91dbaf6 3840 git-annex_5.20140919.dsc 834609cd91ef36c68e479c55c71f9f5ae56b641c 5812431 git-annex_5.20140919.tar.gz f64327ed7b9b66bafcfe87596b12d78eb2bc8dfa 8477288 git-annex_5.20140919_amd64.deb Checksums-Sha256: 56255117d4aac8ad75b717d683e559053f3a5d0e2e417f6deaa0ae8e2903a474 3840 git-annex_5.20140919.dsc 2308c0a9b0986e9f64eee59bcca221aa12e65a1075f1a0f5c82adb2512988825 5812431 git-annex_5.20140919.tar.gz d15223a91bfa7a0160ad5ebabbf444b9bbfe8479e2ec0e7d24627103b4ff571c 8477288 git-annex_5.20140919_amd64.deb Files: c233565fbb9132ecc9baec4a06678829 8477288 utils optional git-annex_5.20140919_amd64.deb 64a6283337e9c5d2c9b1b75fc19f78e8 3840 utils optional git-annex_5.20140919.dsc 6938b0c3d9af8c5a230e650c2913f1ba 5812431 utils optional git-annex_5.20140919.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVBxjdskQ2SIlEuPHAQI7hg/+PAasXRyOVLUnRwb9PwTQQMEbEsw8ss/h Oe9LCk6kGYXsCaJGf3C3M5gnCpVw04TAF4GjWAHwqAro7qUO9kpz09R30Jg1xH1C /sgtQwU++B5eqM5SSy0WX1j9mZ0/j3dCxAyVXL23LKwrcRm8YIiKRAitBg/IHofa B2i2lS9EL+L0b3fgGpS41M+p+tcKD+G11hbuwj0UNnqaOIp2cohhBU+5I+qqoPdn 9Vc8CG9ksKf4QjVZgKMoQ8+8hTFBmF56s87f/FSxDh2tNWk23lkzedoaEjP017x9 l/F0BToOxpP1jZHgTtSh+IPebCgRIK7oCsJXLISJwHnHsHq9gC8Iw5qAUc3sjE3s I7rHQn4M4vSMh0vVXHK6G4gjp84h0hcM/+yV04NJZZU4fng32nO03MHddozAENEs oAPArJpE5K13q0YoAcKox5n78qXM/Qr7JG/LKLBMrXvlN8TkIEEPrnCCuuXC8Pbi dP3miIx8m4CFRdXqKYCx8XMyXhV5klZO3CZQZF0Vv+wwuWqi6Em6HElah7Ry+Hjt 0WRIV/Zz9QWUfICsWSxn4aROfdc+KXly819rUI16PLTCo8bx9vGzGINsFgDojwTj jNCbUi3V8dqEqF5Ybc/+eQL9z4uNEPNzKp/rz3z2Ls3hfzRdO3CS+1Ag+YXHul+i QPw2qk3K6Ts= =VkYr -----END PGP SIGNATURE-----
