git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[ANNOUNCE] GIT 1.1.5

From
Junio C Hamano <junkio@cox.net>
Date
Jan 28, 2006, 04:48 UTC
Message-ID
<7virs5x8im.fsf@assigned-by-dhcp.cox.net>

The latest maintenance release GIT 1.1.5 is available at the usual places:

	http://www.kernel.org/pub/software/scm/git/
	git-1.1.5.tar.{gz,bz2}			(tarball)
	RPMS/$arch/git-*-1.1.5-1.$arch.rpm	(RPM)

Mark Wooding noticed that there is a bug in git-checkout-index to overflow its internal buffer, if you construct a blob that records an insanely long symbolic link in your index file and try to check it out. This makes it dump core or worse.

The fix for this problem is the only change from v1.1.4. The master branch has been updated with the same fix (so has "pu").

---

By the way, "dump core or worse" is a subtle way to say that this is a security fix. To be victimized, you have to somehow first get such a bogus symbolic link in your index. Merging with somebody of dubious trustworthiness is a way to do so; please practice safe merge ;-).

Next: Eric Sandall
Message 1 of 2 in “[ANNOUNCE] GIT 1.1.5”
  1. Junio C HamanoJan 28, 2006
  2. Eric SandallJan 31, 2006

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.