tree 21c128b421b7f754c19981193a3614bc5f79a4b8
parent a927d62c1505610394a3ec8d0e5fb77f366cf4dc
author David Ostrovsky <david@ostrovsky.org> 1545937726 +0100
committer David Pursehouse <dpursehouse@collab.net> 1547183610 +0000

Upgrade JGit to 5.2.1.201812262042-r

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 stateless transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I1018c6fcb5cd4e34d2b106929db3a8238f45cda0