diff options
author | Joseph Vusich <jvusich@amazon.com> | 2018-05-30 03:47:57 +0000 |
---|---|---|
committer | Joseph Vusich <jvusich@amazon.com> | 2018-05-30 17:42:15 +0000 |
commit | d87faeca21e6f416e88ae3d24dae58845d7487d4 (patch) | |
tree | b25fe7461e705f87b04f4525832635f506174441 /plumbing/transport/http/common.go | |
parent | 79b7f24160029966238b04dd41f69add0741a1d2 (diff) | |
download | go-git-d87faeca21e6f416e88ae3d24dae58845d7487d4.tar.gz |
worktree: Don't allow .gitmodules to be a symlink. Fixes CVE-2018-11235
References:
* https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/
* https://security-tracker.debian.org/tracker/CVE-2018-11235
* https://github.com/git/git/commit/10ecfa76491e4923988337b2e2243b05376b40de
Signed-off-by: Joseph Vusich <jvusich@amazon.com>
Diffstat (limited to 'plumbing/transport/http/common.go')
0 files changed, 0 insertions, 0 deletions