[Pkg-privacy-commits] [torbrowser-launcher] annotated tag debian/0.2.4-1 created (now 1ba45d6)

Holger Levsen holger at moszumanska.debian.org
Wed Mar 16 02:14:00 UTC 2016


This is an automated email from the git hooks/post-receive script.

holger pushed a change to annotated tag debian/0.2.4-1
in repository torbrowser-launcher.

        at  1ba45d6   (tag)
   tagging  a0933c174085d81c4139308fdba8747a420e01c0 (commit)
  replaces  debian/0.2.3-1
 tagged by  Holger Levsen
        on  Tue Mar 15 20:55:00 2016 -0400

- Log -----------------------------------------------------------------
released as 0.2.4-1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=HVIN
-----END PGP SIGNATURE-----

Holger Levsen (3):
      New upstream version which prevents a signature verification attack, see https://github.com/micahflee/torbrowser-launcher/issues/229 for more info.
      Fix AppArmor profile to allow self upgrades. Thanks intrigeri for the patch! (Closes: #817267)
      release as 0.2.4-1

Micah Lee (3):
      Prevent signature verification attack by passing both data file as well as sig file into gpg (fixes #229)
      Prevent attempts at directory traversal attacks, even though they do not look exploitable
      Updated CHANGELOG and version bump to 0.2.4

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/torbrowser-launcher.git



More information about the Pkg-privacy-commits mailing list