| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <56EBBC72.7000201@web.de>
Date: Fri, 18 Mar 2016 09:29:38 +0100
From: Torsten Bögershausen <tboegi@....de>
To: Junio C Hamano <gitster@...ox.com>, git@...r.kernel.org
Cc: Linux Kernel <linux-kernel@...r.kernel.org>
Subject: Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)
> Git v2.7.4 Release Notes
> ========================
>
> Fixes since v2.7.3
> ------------------
>
> * Bugfix patches were backported from the 'master' front to plug heap
> corruption holes, to catch integer overflow in the computation of
> pathname lengths, and to get rid of the name_path API. Both of
> these would have resulted in writing over an under-allocated buffer
> when formulating pathnames while tree traversal.
>
> ----------------------------------------------------------------
>
> Changes since v2.7.3 are as follows:
>
> Jeff King (7):
> add helpers for detecting size_t overflow
> tree-diff: catch integer overflow in combine_diff_path allocation
> http-push: stop using name_path
> show_object_with_name: simplify by using path_name()
> list-objects: convert name_path to a strbuf
> list-objects: drop name_path entirely
> list-objects: pass full pathname to callbacks
>
If there is a new 2.7.x release, does it make sense to cherry-pick this one:
commit 7b6daf8d2fee1a9866b1d4eddbfaa5dbc42c5dbb
Author: Torsten Bögershausen <tboegi@....de>
Date: Sun Feb 28 21:09:44 2016 +0100
config.mak.uname: use clang for Mac OS X 10.6
Powered by blists - more mailing lists