From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Fri, 27 May 2011 18:09:02 GMT
Subject: Re: [PATCH maint 0/3] do not write files outside of work-dir
Message-ID: <alpine.DEB.1.00.1105272007500.16250@s15462909.onlinehome-server.info>
In-Reply-To: <7vr57krppq.fsf@alter.siamese.dyndns.org>

Hi Junio,

On Fri, 27 May 2011, Junio C Hamano wrote:

> Erik Faye-Lund <kusmabite@gmail.com> writes:
> 
> > Theo Niessink has uncovered a serious sercurity issue in Git for 
> > Windows, where cloning an evil repository can arbitrarily overwrite 
> > files outside the repository. Since many Windows users run as 
> > administrators, this can be used for very nasty purposes.
> 
> Which of my integration branches do msysGit/Git for Windows folks base 
> their releases these days? I could carry this through the regular "next 
> to master and then sometime later to maint" schedule, but if you are not 
> using maint and basing primarily on master then I'd rather skip the "and 
> then sometime later to maint" part.

We follow 'next'.

[Cc:ing the msysGit list, as I don't know whether Pat or Sebastian follow 
git@vger]

Thanks,
Johannes