Re: [egit-dev] FYI

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [egit-dev] FYI

From: Shawn Pearce <spearce@xxxxxxxxxxx>
Date: Thu, 17 Mar 2011 08:55:59 -0700
Delivered-to: egit-dev@xxxxxxxxxxx
List-archive: <https://dev.eclipse.org/mailman/private/egit-dev>
List-help: <mailto:egit-dev-request@eclipse.org?subject=help>
List-subscribe: <https://dev.eclipse.org/mailman/listinfo/egit-dev>, <mailto:egit-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://dev.eclipse.org/mailman/options/egit-dev>, <mailto:egit-dev-request@eclipse.org?subject=unsubscribe>

On Thu, Mar 17, 2011 at 03:15, Alex Blewitt <alex.blewitt@xxxxxxxxx> wrote:
> http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_git_version

Yes. :-(

Fortunately JGit is immune to most of these. Because we don't
implement gitweb, and if we did, we don't implement it by running
shell commands from perl with tainted input from the user. :-)

And we don't support the external diff/merge stuff yet, and we don't
support the gitdir: file either.

*sigh*

-- 
Shawn.

Follow-Ups:
- Re: [egit-dev] FYI
  - From: Wayne Beaton

References:
- [egit-dev] FYI
  - From: Alex Blewitt

Prev by Date: Re: [egit-dev] getRefDatabase
Next by Date: Re: [egit-dev] getHeads feature
Previous by thread: [egit-dev] FYI
Next by thread: Re: [egit-dev] FYI
Index(es):
- Date
- Thread

Breadcrumbs