From: Junio C Hamano <gitster@pobox.com>
Date: Fri, 27 May 2011 17:57:37 GMT
Subject: Re: [PATCH maint 0/3] do not write files outside of work-dir
Message-ID: <7vr57krppq.fsf@alter.siamese.dyndns.org>
In-Reply-To: <1306512040-1468-1-git-send-email-kusmabite@gmail.com>

Erik Faye-Lund <kusmabite@gmail.com> writes:

> Theo Niessink has uncovered a serious sercurity issue in Git for Windows,
> where cloning an evil repository can arbitrarily overwrite files outside
> the repository. Since many Windows users run as administrators, this can
> be used for very nasty purposes.

Which of my integration branches do msysGit/Git for Windows folks base
their releases these days? I could carry this through the regular "next to
master and then sometime later to maint" schedule, but if you are not
using maint and basing primarily on master then I'd rather skip the "and
then sometime later to maint" part.