From a691f950b16d6ee48b9f365a88ddf4fecf1941d0 Mon Sep 17 00:00:00 2001 From: Taylor Blau Date: Fri, 19 May 2017 13:51:31 -0600 Subject: [PATCH] release: v2.1.1 --- CHANGELOG.md | 24 ++++++++++++++++++++++++ config/version.go | 2 +- debian/changelog | 6 ++++++ rpm/SPECS/git-lfs.spec | 2 +- versioninfo.json | 4 ++-- 5 files changed, 34 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 048292fb2f..06fe9cd85a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,29 @@ # Git LFS Changelog +## 2.1.1 (19 May, 2017) + +Git LFS v2.1.1 ships with bug fixes and a security patch fixing a remote code +execution vulnerability exploitable by setting a SSH remote via your +repository's `.lfsconfig` to contain the string "-oProxyCommand". This +vulnerability is only exploitable if an attacker has write access to your +repository, or you clone a repository with a `.lfsconfig` file containing that +string. + +### Bugs + +* Make pull return non-zero error code when some downloads failed #2245 (@seth2810, @technoweenie) +* lfsapi: support cross-scheme redirection #2243 (@ttaylorr) +* sanitize ssh options parsed from ssh:// url #2242 (@technoweenie) +* filepathfilter: interpret as .gitignore syntax #2238 (@technoweenie) +* tq/basic_download: guard against nil HTTP response #2229 (@ttaylorr) +* commands: fix logged error not interpolating format qualifiers #2230 (@ttaylorr) + +### Misc + +* release: backport Debian 9-related changes #2244 (@ssgelm, @andyneff, @ttaylorr) +* Add git-lfs-lock and git-lfs-unlock to help index #2240 (@dpursehouse) +* config: allow multiple environments when calling config.Unmarshal #2224 (@ttaylorr) + ## 2.1.0 (28 April, 2017) ### Features diff --git a/config/version.go b/config/version.go index 12f0397844..7b210d12f6 100644 --- a/config/version.go +++ b/config/version.go @@ -12,7 +12,7 @@ var ( ) const ( - Version = "2.1.0" + Version = "2.1.1" ) func init() { diff --git a/debian/changelog b/debian/changelog index f2c8c0faab..58b4279d7b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +git-lfs (2.1.1) stable; urgency=low + + * New upstream version + + -- Taylor Blau Fri, 19 May 2017 14:29:00 +0000 + git-lfs (2.1.0) stable; urgency=low * New upstream version diff --git a/rpm/SPECS/git-lfs.spec b/rpm/SPECS/git-lfs.spec index 2feee1f447..77db6c5c86 100644 --- a/rpm/SPECS/git-lfs.spec +++ b/rpm/SPECS/git-lfs.spec @@ -1,5 +1,5 @@ Name: git-lfs -Version: 2.1.0 +Version: 2.1.1 Release: 1%{?dist} Summary: Git extension for versioning large files diff --git a/versioninfo.json b/versioninfo.json index 1f9bb5baf4..dc68fb2c52 100644 --- a/versioninfo.json +++ b/versioninfo.json @@ -4,7 +4,7 @@ "FileVersion": { "Major": 2, "Minor": 1, - "Patch": 0, + "Patch": 1, "Build": 0 } }, @@ -13,6 +13,6 @@ "FileDescription": "Git LFS", "LegalCopyright": "GitHub, Inc. and Git LFS contributors", "ProductName": "Git Large File Storage (LFS)", - "ProductVersion": "2.1.0" + "ProductVersion": "2.1.1" } }