Skip to content

3.0.1
Compare
Choose a tag to compare
@lbergelson lbergelson released this 26 Sep 20:26
· 40 commits to master since this release
3.0.1
This tag was signed with the committer’s verified signature.
lbergelson Louis Bergelson
GPG key ID: CDB73EA73CD9CF1E
Learn about vigilant mode.
4a4024a
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Fix for a long standing vulnerability around temporary directory creation which could expose data to malicious users with access to a shared system. See for more information #1617

Compatibility note:

The previous implementation of IOUtil.createTempDir() could accept a prefix with a complete file path:
IOUtil.createTempDir("path/to/my/tempdir/prefix", ""). The new implementation will now throw in that case. You can use Files.createTemporaryDirectory(path, prefix) for those use cases instead.

4a4024a Fix temporary directory hijacking or temporary directory information disclosure (#1621)
9fd0ecf Disable codecov until we can fix the uploader (#1622)
347c0ac Fix EdgeReadIterator (#1616)
d15a5ba Added ULTIMA and ELEMENT as valid value for RG-PL according to SAM spec. (#1619)

Assets 2