zEscrow 1.3

Milestone information

Project:
zEscrow
Series:
trunk
Version:
1.3
Released:
 
Registrant:
Dustin Kirkland 
Release registered:
Active:
Yes. Drivers can target bugs and blueprints to this milestone.  

Download RDF metadata

Activities

Assigned to you:
No blueprints or bugs assigned to you.
Assignees:
No users assigned to blueprints and bugs.
Blueprints:
No blueprints are targeted to this milestone.
Bugs:
No bugs are targeted to this milestone.

Download files for this release

After you've downloaded a file, you can verify its authenticity using its MD5 sum or signature. (How do I verify a download?)

File Description Downloads
download icon zescrow_1.3.orig.tar.gz (md5, sig) release tarball 15
last downloaded 71 weeks ago
Total downloads: 15

Release notes 

This release does not have release notes.

Changelog 

View the full changelog

zescrow (1.3-0ubuntu1) precise; urgency=low

  * debian/copyright, upload/go/index.html, upload/index.html,
    usr/bin/zEscrow, www/deposit/go/index.html, www/deposit/index.html,
    www/include/above.html, www/include/below.html,
    www/include/credentials.html.CHANGE_ME, www/include/escrow.css,
    www/include/functions.html, www/index.html, www/not-
    found/index.html, www/openid/index.html, www/openid/return.html,
    www/privacy.html, www/retrieve/go/index.html,
    www/retrieve/index.html, www/terms.html:
    - Copyright updated to include Gazzang, Inc.
  * usr/bin/zEscrow:
    - Multiple security fixes, according to line-by-line code audit by
      Kees Cook <email address hidden>
    - use 'set -e' rather than sh -e, to ensure errors are caught if an
      interpreter other than sh is used
    - store the stty earlier and restore on trapped exits
    - generate the tempfile with the required extensions
    - drop redundant chmodding
    - note specifically that the user's passphrase is NOT sent to the server
    - remove one of the client/server roundtrips, fetching the key
      fingerprint
    - instead, use gpg's --status-fd to parse machine readable output and
      retrieve the fingerprint from there
    - catch curl errors
    - catch gpg import errors
    - validate the fingerprint
    - drop use of wildcard in copying to tempdir
    - make the $url more readable
    - handle the browser launching prompt correctly

 -- Dustin Kirkland <email address hidden> Sat, 07 Apr 2012 12:11:29 -0500

0 blueprints and 0 bugs targeted

There are no feature specifications or bug tasks targeted to this milestone. The project's maintainer, driver, or bug supervisor can target specifications and bug tasks to this milestone to track the things that are expected to be completed for the release.

This milestone contains Public information
Everyone can see this information.