Upgrade JGit to

Authored by David Ostrovsky <david@ostrovsky.org> on Dec 27 2018, 8:34 PM.


Upgrade JGit to

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I8b81336acffc655f8d768ba84c8b95a086397b32

Event Timeline

David Pursehouse <dpursehouse@collab.net> committed rGERRITDEPLOY0b61aa0aa19a: Upgrade JGit to (authored by David Ostrovsky <david@ostrovsky.org>).Jan 10 2019, 11:35 PM