diff options
| author | David Ostrovsky <david@ostrovsky.org> | 2018-12-27 20:34:51 +0100 |
|---|---|---|
| committer | David Pursehouse <dpursehouse@collab.net> | 2019-01-11 09:18:17 +0900 |
| commit | 6cf297baf882fafa32108c4aa8805c12b1d84be9 (patch) | |
| tree | a7442802d49ab7477e1183ee575ebe9fcdfcf97c /tools/maven/gerrit-plugin-api_pom.xml | |
| parent | a32ed26e9a7dcc22bd9d333a90ba561044053853 (diff) | |
Upgrade JGit to 5.1.5.201812261915-r
This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.
Bug: Issue 10262
Change-Id: I4805d128fa5cbe0ea202435c899ae963faf7d7b3
Diffstat (limited to 'tools/maven/gerrit-plugin-api_pom.xml')
0 files changed, 0 insertions, 0 deletions