{"action":"published","release":{"url":"https://api.github.com/repos/mailvelope/mailvelope/releases/18414735","assets_url":"https://api.github.com/repos/mailvelope/mailvelope/releases/18414735/assets","upload_url":"https://uploads.github.com/repos/mailvelope/mailvelope/releases/18414735/assets{?name,label}","html_url":"https://github.com/mailvelope/mailvelope/releases/tag/v3.3.0","id":18414735,"node_id":"MDc6UmVsZWFzZTE4NDE0NzM1","tag_name":"v3.3.0","target_commitish":"master","name":"Mailvelope 3.3.0","draft":false,"author":{"login":"toberndo","id":1164474,"node_id":"MDQ6VXNlcjExNjQ0NzQ=","avatar_url":"https://avatars2.githubusercontent.com/u/1164474?v=4","gravatar_id":"","url":"https://api.github.com/users/toberndo","html_url":"https://github.com/toberndo","followers_url":"https://api.github.com/users/toberndo/followers","following_url":"https://api.github.com/users/toberndo/following{/other_user}","gists_url":"https://api.github.com/users/toberndo/gists{/gist_id}","starred_url":"https://api.github.com/users/toberndo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/toberndo/subscriptions","organizations_url":"https://api.github.com/users/toberndo/orgs","repos_url":"https://api.github.com/users/toberndo/repos","events_url":"https://api.github.com/users/toberndo/events{/privacy}","received_events_url":"https://api.github.com/users/toberndo/received_events","type":"User","site_admin":false},"prerelease":false,"created_at":"2019-07-04T13:03:58Z","published_at":"2019-07-04T13:15:31Z","assets":[],"tarball_url":"https://api.github.com/repos/mailvelope/mailvelope/tarball/v3.3.0","zipball_url":"https://api.github.com/repos/mailvelope/mailvelope/zipball/v3.3.0","body":"* [Security] New key import UI that displays all imported user IDs and requires additional confirmation step (CVE-2019-9150)\r\n* [Security] Fix insufficient key equality checks when importing keys via the client-API\r\n* [Security] Fix self signature check for armoredDraft option when using GnuPG keyring. Sign and encrypt operations should always require user interaction (CVE-2019-9149).\r\n* [Security] Add missing message and key validity checks (CVE-2019-9148)\r\n* [Security] Improve counter of private key operations to increase resistance against time-based side-channel attacks\r\n* Improve GPG detection on startup\r\n* [Security] Fix issue with the private key restore mechanism, that stores unlocked private keys inside the encrypted recovery message\r\n* Support for Autocrypt headers in client-API"}}
{"actor":{"display_login":"toberndo"}}