Skip to content

Commit af6b65d

Browse files
committed
Git 2.26.2
This merges up the security fix from v2.17.5. Signed-off-by: Jonathan Nieder <[email protected]>
2 parents de49261 + 7397ca3 commit af6b65d

18 files changed

+504
-42
lines changed

Documentation/RelNotes/2.17.5.txt

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
Git v2.17.5 Release Notes
2+
=========================
3+
4+
This release is to address a security issue: CVE-2020-11008
5+
6+
Fixes since v2.17.4
7+
-------------------
8+
9+
* With a crafted URL that contains a newline or empty host, or lacks
10+
a scheme, the credential helper machinery can be fooled into
11+
providing credential information that is not appropriate for the
12+
protocol in use and host being contacted.
13+
14+
Unlike the vulnerability CVE-2020-5260 fixed in v2.17.4, the
15+
credentials are not for a host of the attacker's choosing; instead,
16+
they are for some unspecified host (based on how the configured
17+
credential helper handles an absent "host" parameter).
18+
19+
The attack has been made impossible by refusing to work with
20+
under-specified credential patterns.
21+
22+
Credit for finding the vulnerability goes to Carlo Arenas.

Documentation/RelNotes/2.18.4.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.18.4 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.19.5.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.19.5 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.20.4.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.20.4 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.21.3.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.21.3 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.22.4.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.22.4 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.23.3.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.23.3 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.24.3.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.24.3 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.25.4.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.25.4 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

Documentation/RelNotes/2.26.2.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
Git v2.26.2 Release Notes
2+
=========================
3+
4+
This release merges the security fix that appears in v2.17.5; see
5+
the release notes for that version for details.

0 commit comments

Comments
 (0)