tree 15ae7c7df7b876eeb3310eb6485368400843d29d
parent a9c456548354fd99f6f5d9934f90800e5b117adb
author David Ostrovsky <david@ostrovsky.org> 1545942848 +0100
committer David Pursehouse <dpursehouse@collab.net> 1547163332 +0900

Upgrade JGit to 4.7.7.201812240805-r

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I8b81336acffc655f8d768ba84c8b95a086397b32