Re: [jgit-dev] vulnerability with .config?

[Matthias Sohn <matthias.sohn@xxxxxxxxx>]

On Fri, Dec 19, 2014 at 11:43 AM, François Rey <fr@xxxxxxxxxxxxxxxxx> wrote:

Hi there,
Just wondering, is there anything that needs to be done to mitigate this vulnerability:
https://github.com/blog/1938-git-client-vulnerability-announced
I would assume jgit require the same fix.

we shipped fixed JGit & EGit versions yesterday evening simultaneously with all the other

git implementations as mentioned in the github post you referred to ;-)

https://dev.eclipse.org/mhonarc/lists/jgit-dev/msg02789.html

--

Matthias