Upgrade JGit to

Authored by David Ostrovsky <david@ostrovsky.org> on Dec 27 2018, 8:14 PM.


Upgrade JGit to

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I169fbc742a4edffdf52e6b8ef71b7cd618affa95

Event Timeline

David Pursehouse <dpursehouse@collab.net> committed rGERRITDEPLOY289816b5bd43: Upgrade JGit to (authored by David Ostrovsky <david@ostrovsky.org>).Jan 11 2019, 12:12 AM