| commit | bb3011f0b03cb31c1f06e488314a4e1f2f220ca2 | [log] [tgz] |
|---|---|---|
| author | David Ostrovsky <david@ostrovsky.org> | Thu Dec 27 22:39:09 2018 +0100 |
| committer | David Pursehouse <dpursehouse@collab.net> | Mon Jan 07 08:21:21 2019 +0900 |
| tree | e330aa5dc77320ca23b5afcd392d0eee38620e7e | |
| parent | 4a3c2d14caa7355cf9b12a14ff931bab29b539dc [diff] |
Upgrade JGit to 4.5.5.201812240535-r This release fixes an issue where AdvertiseRefsHook was not called for git-upload-pack in protocol v0 bidirectional transports, meaning that wants aren't validated and a user can fetch anything that is pointed to by any ref (using fetch-by-sha1), as long as they can guess the object name. Bug: Issue 10262 Change-Id: I5c1af5c7c549e1796fe6347c1ec08797471393a1