René's URL Explorer Experiment


Title: Backport fixes for CVE 2018-11235 by ethomson · Pull Request #4659 · libgit2/libgit2 · GitHub

Open Graph Title: Backport fixes for CVE 2018-11235 by ethomson · Pull Request #4659 · libgit2/libgit2

X Title: Backport fixes for CVE 2018-11235 by ethomson · Pull Request #4659 · libgit2/libgit2

Description: A cross-platform, linkable library implementation of Git that you can use in your application. - Backport fixes for CVE 2018-11235 by ethomson · Pull Request #4659 · libgit2/libgit2

Open Graph Description: Backporting @carlosmn's fixes so that we can do an 0.27.1 security release. Thanks @carlosmn and @pks-t for the work.

X Description: Backporting @carlosmn's fixes so that we can do an 0.27.1 security release. Thanks @carlosmn and @pks-t for the work.

Opengraph URL: https://github.com/libgit2/libgit2/pull/4659

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:83bfbecf-8b6b-9948-da53-cf78cf11675c
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id86AC:32AC14:238D275:2E359C5:6A5C996C
html-safe-nonce862a1c523bf31af580420384fce0ab75cf7bccdb79c66f18732090c0d3690515
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NkFDOjMyQUMxNDoyMzhEMjc1OjJFMzU5QzU6NkE1Qzk5NkMiLCJ2aXNpdG9yX2lkIjoiNDMwMzM3MzY1Njg4NDI4Nzg1MiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac1d53c30bda1b25708ea7a8f54899f0d3e6ee64468c277d1afb1f938520daf8b4
hovercard-subject-tagpull_request:191213276
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/libgit2/libgit2/4659/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/089352bcf330e438cc52b9c6b5c2384f6386b87ca7f3beb0653af717be106733/libgit2/libgit2/pull/4659
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/089352bcf330e438cc52b9c6b5c2384f6386b87ca7f3beb0653af717be106733/libgit2/libgit2/pull/4659
og:image:altBackporting @carlosmn's fixes so that we can do an 0.27.1 security release. Thanks @carlosmn and @pks-t for the work.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameethomson
hostnamegithub.com
expected-hostnamegithub.com
None5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b
turbo-cache-controlno-cache
go-importgithub.com/libgit2/libgit2 git https://github.com/libgit2/libgit2.git
octolytics-dimension-user_id394745
octolytics-dimension-user_loginlibgit2
octolytics-dimension-repository_id901662
octolytics-dimension-repository_nwolibgit2/libgit2
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id901662
octolytics-dimension-repository_network_root_nwolibgit2/libgit2
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release9c975978430e9ad293956f2bbdaf153b1bd84a99
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/libgit2/libgit2/pull/4659#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Flibgit2%2Flibgit2%2Fpull%2F4659
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Flibgit2%2Flibgit2%2Fpull%2F4659
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=libgit2%2Flibgit2
Reloadhttps://github.com/libgit2/libgit2/pull/4659
Reloadhttps://github.com/libgit2/libgit2/pull/4659
Reloadhttps://github.com/libgit2/libgit2/pull/4659
Please reload this pagehttps://github.com/libgit2/libgit2/pull/4659
libgit2 https://github.com/libgit2
libgit2https://github.com/libgit2/libgit2
Notifications https://github.com/login?return_to=%2Flibgit2%2Flibgit2
Fork 2.6k https://github.com/login?return_to=%2Flibgit2%2Flibgit2
Star 10.5k https://github.com/login?return_to=%2Flibgit2%2Flibgit2
Code https://github.com/libgit2/libgit2
Issues 421 https://github.com/libgit2/libgit2/issues
Pull requests 107 https://github.com/libgit2/libgit2/pulls
Discussions https://github.com/libgit2/libgit2/discussions
Actions https://github.com/libgit2/libgit2/actions
Projects https://github.com/libgit2/libgit2/projects
Security and quality 9 https://github.com/libgit2/libgit2/security
Insights https://github.com/libgit2/libgit2/pulse
Code https://github.com/libgit2/libgit2
Issues https://github.com/libgit2/libgit2/issues
Pull requests https://github.com/libgit2/libgit2/pulls
Discussions https://github.com/libgit2/libgit2/discussions
Actions https://github.com/libgit2/libgit2/actions
Projects https://github.com/libgit2/libgit2/projects
Security and quality https://github.com/libgit2/libgit2/security
Insights https://github.com/libgit2/libgit2/pulse
ethomsonhttps://github.com/ethomson
maint/v0.27https://github.com/libgit2/libgit2/tree/maint/v0.27
ethomson/submodule-0_27https://github.com/libgit2/libgit2/tree/ethomson/submodule-0_27
Conversationhttps://github.com/libgit2/libgit2/pull/4659
Commits22 (22)https://github.com/libgit2/libgit2/pull/4659/commits
Checkshttps://github.com/libgit2/libgit2/pull/4659/checks
Files changedhttps://github.com/libgit2/libgit2/pull/4659/files
Backport fixes for CVE 2018-11235https://github.com/libgit2/libgit2/pull/4659#top
ethomsonhttps://github.com/ethomson
maint/v0.27https://github.com/libgit2/libgit2/tree/maint/v0.27
ethomson/submodule-0_27https://github.com/libgit2/libgit2/tree/ethomson/submodule-0_27
https://github.com/ethomson
ethomsonhttps://github.com/ethomson
May 29, 2018https://github.com/libgit2/libgit2/pull/4659#issue-327411373
Please reload this pagehttps://github.com/libgit2/libgit2/pull/4659
@carlosmnhttps://github.com/carlosmn
@carlosmnhttps://github.com/carlosmn
@pks-thttps://github.com/pks-t
Please reload this pagehttps://github.com/libgit2/libgit2/pull/4659
carlosmnhttps://github.com/carlosmn
May 29, 2018 13:44https://github.com/libgit2/libgit2/pull/4659#commits-pushed-6442f1f
https://github.com/carlosmn
https://github.com/pks-t
submodule: add a failing test for a submodule escaping .git/moduleshttps://github.com/libgit2/libgit2/pull/4659/commits/6442f1f17d6fce8006141968c2e8a246b4673250
6442f1fhttps://github.com/libgit2/libgit2/pull/4659/commits/6442f1f17d6fce8006141968c2e8a246b4673250
https://github.com/carlosmn
https://github.com/pks-t
submodule: ignore submodules which include path traversal in their namehttps://github.com/libgit2/libgit2/pull/4659/commits/e6c757a7f134b121d1fcad3a3a693e042d41ed34
e6c757ahttps://github.com/libgit2/libgit2/pull/4659/commits/e6c757a7f134b121d1fcad3a3a693e042d41ed34
https://github.com/carlosmn
https://github.com/pks-t
submodule: also validate Windows-separated paths for validityhttps://github.com/libgit2/libgit2/pull/4659/commits/916af8ea08d4c4b7658c49ec4c904050def3800b
916af8ehttps://github.com/libgit2/libgit2/pull/4659/commits/916af8ea08d4c4b7658c49ec4c904050def3800b
https://github.com/carlosmn
https://github.com/pks-t
path: provide a generic dogit checking function for HFShttps://github.com/libgit2/libgit2/pull/4659/commits/37dc60b609e53da3625f58e1c2d5102daa926dae
37dc60bhttps://github.com/libgit2/libgit2/pull/4659/commits/37dc60b609e53da3625f58e1c2d5102daa926dae
https://github.com/carlosmn
https://github.com/pks-t
path: provide a generic function for checking dogit files on NTFShttps://github.com/libgit2/libgit2/pull/4659/commits/dd364dde1632a075beb754dcc2bb9baa9e02482c
dd364ddhttps://github.com/libgit2/libgit2/pull/4659/commits/dd364dde1632a075beb754dcc2bb9baa9e02482c
https://github.com/carlosmn
https://github.com/pks-t
path: add a function to detect an .gitmodules filehttps://github.com/libgit2/libgit2/pull/4659/commits/26b3cec0b3dc4fbc135c3cba5355fbcfce00dac3
26b3cechttps://github.com/libgit2/libgit2/pull/4659/commits/26b3cec0b3dc4fbc135c3cba5355fbcfce00dac3
https://github.com/carlosmn
https://github.com/pks-t
path: add functions to detect .gitconfig and .gitattributeshttps://github.com/libgit2/libgit2/pull/4659/commits/0cc1462722e3ea4e03c0bc7ad025e29632e6cf79
0cc1462https://github.com/libgit2/libgit2/pull/4659/commits/0cc1462722e3ea4e03c0bc7ad025e29632e6cf79
https://github.com/carlosmn
https://github.com/pks-t
path: hide the dotgit file functionshttps://github.com/libgit2/libgit2/pull/4659/commits/f907a6f5ebd5bbb3286a2e9463b6eba0ff494426
f907a6fhttps://github.com/libgit2/libgit2/pull/4659/commits/f907a6f5ebd5bbb3286a2e9463b6eba0ff494426
https://github.com/carlosmn
https://github.com/pks-t
path: expose dotgit detection functions per filesystemhttps://github.com/libgit2/libgit2/pull/4659/commits/d7ee21eecf01199dcdee3a67b8b193d21dc60cf2
d7ee21ehttps://github.com/libgit2/libgit2/pull/4659/commits/d7ee21eecf01199dcdee3a67b8b193d21dc60cf2
https://github.com/carlosmn
https://github.com/pks-t
checkout: add a failing test for refusing a symlinked .gitmoduleshttps://github.com/libgit2/libgit2/pull/4659/commits/ed357be17f837ce7ac3eed0f409df53bdc2e7542
ed357behttps://github.com/libgit2/libgit2/pull/4659/commits/ed357be17f837ce7ac3eed0f409df53bdc2e7542
https://github.com/carlosmn
https://github.com/pks-t
path: accept the name length as a parameterhttps://github.com/libgit2/libgit2/pull/4659/commits/c7cac08868bda11c33eb3a924693084962ba10d2
c7cac08https://github.com/libgit2/libgit2/pull/4659/commits/c7cac08868bda11c33eb3a924693084962ba10d2
https://github.com/carlosmn
https://github.com/pks-t
index: stat before creating the entryhttps://github.com/libgit2/libgit2/pull/4659/commits/08d4b459cb8b2c6edf057ff5d66e15bfc555784e
08d4b45https://github.com/libgit2/libgit2/pull/4659/commits/08d4b459cb8b2c6edf057ff5d66e15bfc555784e
https://github.com/carlosmn
https://github.com/pks-t
path: reject .gitmodules as a symlinkhttps://github.com/libgit2/libgit2/pull/4659/commits/aa003557221b8c18135eadc2af6d4681d3516c02
aa00355https://github.com/libgit2/libgit2/pull/4659/commits/aa003557221b8c18135eadc2af6d4681d3516c02
https://github.com/carlosmn
https://github.com/pks-t
checkout: change symlinked .gitmodules file test to expect failurehttps://github.com/libgit2/libgit2/pull/4659/commits/be20626a7d90640b49ad923b75cf7c5eaa082d13
be20626https://github.com/libgit2/libgit2/pull/4659/commits/be20626a7d90640b49ad923b75cf7c5eaa082d13
https://github.com/carlosmn
https://github.com/pks-t
path: check for a symlinked .gitmodules in fs-agnostic codehttps://github.com/libgit2/libgit2/pull/4659/commits/a9e609945998ca49d7eec17e833b1d40f46b9995
a9e6099https://github.com/libgit2/libgit2/pull/4659/commits/a9e609945998ca49d7eec17e833b1d40f46b9995
https://github.com/carlosmn
https://github.com/pks-t
submodule: the repostiory for _name_is_valid should not be consthttps://github.com/libgit2/libgit2/pull/4659/commits/a3df20cf0dcb9adb1c9f72b1495d24c39318569b
a3df20chttps://github.com/libgit2/libgit2/pull/4659/commits/a3df20cf0dcb9adb1c9f72b1495d24c39318569b
https://github.com/carlosmn
https://github.com/pks-t
submodule: replace index with strchr which exists on Windowshttps://github.com/libgit2/libgit2/pull/4659/commits/f650153a2b50d02792df78460b0e64f15250a4b3
f650153https://github.com/libgit2/libgit2/pull/4659/commits/f650153a2b50d02792df78460b0e64f15250a4b3
https://github.com/carlosmn
https://github.com/pks-t
submodule: plug leaks from the escape detectionhttps://github.com/libgit2/libgit2/pull/4659/commits/cfed1be8949ed441485c6686f1dbc022d03de192
cfed1behttps://github.com/libgit2/libgit2/pull/4659/commits/cfed1be8949ed441485c6686f1dbc022d03de192
https://github.com/carlosmn
https://github.com/pks-t
path: hand-code the zero-width joiner as UTF-8https://github.com/libgit2/libgit2/pull/4659/commits/ed95962b2b9df1fbe32748da8ca596ecc818c6ae
ed95962https://github.com/libgit2/libgit2/pull/4659/commits/ed95962b2b9df1fbe32748da8ca596ecc818c6ae
https://github.com/pks-t
CHANGELOG: update for v0.27.1https://github.com/libgit2/libgit2/pull/4659/commits/78daf00baa3b77c1b09f57f52306c267769faaa1
78daf00https://github.com/libgit2/libgit2/pull/4659/commits/78daf00baa3b77c1b09f57f52306c267769faaa1
https://github.com/pks-t
https://github.com/carlosmn
version: bump library version to 0.27.1https://github.com/libgit2/libgit2/pull/4659/commits/df53ce3270ddfae796516ff46b3b204811f91011
df53ce3https://github.com/libgit2/libgit2/pull/4659/commits/df53ce3270ddfae796516ff46b3b204811f91011
https://github.com/ethomson
ethomsonhttps://github.com/ethomson
May 29, 2018https://github.com/libgit2/libgit2/pull/4659#issuecomment-392863017
@pks-thttps://github.com/pks-t
Please reload this pagehttps://github.com/libgit2/libgit2/pull/4659
https://github.com/ethomson
ethomsonhttps://github.com/ethomson
May 29, 2018https://github.com/libgit2/libgit2/pull/4659#event-1651768200
https://github.com/carlosmn
https://github.com/ethomson
CHANGELOG: mentionhttps://github.com/libgit2/libgit2/pull/4659/commits/f9ade3147638bb18ce216c625302e9d49d138c8d
CVE-2018-11235https://github.com/advisories/GHSA-v6w3-vcjx-mwhx
is covered by v0.27.1https://github.com/libgit2/libgit2/pull/4659/commits/f9ade3147638bb18ce216c625302e9d49d138c8d
f9ade31https://github.com/libgit2/libgit2/pull/4659/commits/f9ade3147638bb18ce216c625302e9d49d138c8d
https://github.com/ethomson
ethomsonhttps://github.com/ethomson
force-pushedhttps://github.com/libgit2/libgit2/compare/e006de27023c97e86ffe70a573e7325dd204bfca..f9ade3147638bb18ce216c625302e9d49d138c8d
e006de2https://github.com/libgit2/libgit2/commit/e006de27023c97e86ffe70a573e7325dd204bfca
f9ade31https://github.com/libgit2/libgit2/commit/f9ade3147638bb18ce216c625302e9d49d138c8d
Compare https://github.com/libgit2/libgit2/compare/e006de27023c97e86ffe70a573e7325dd204bfca..f9ade3147638bb18ce216c625302e9d49d138c8d
May 29, 2018 18:06https://github.com/libgit2/libgit2/pull/4659#event-1651781990
https://github.com/ethomson
ethomsonhttps://github.com/ethomson
b0d9952https://github.com/libgit2/libgit2/commit/b0d9952c318a3d1b8917e06ad46b9110c0c28831
May 29, 2018https://github.com/libgit2/libgit2/pull/4659#event-1651782449
https://github.com/ethomson
ethomsonhttps://github.com/ethomson
May 29, 2018 18:06https://github.com/libgit2/libgit2/pull/4659#event-1651782839
https://github.com/Therzok
Therzokhttps://github.com/Therzok
May 29, 2018 https://github.com/libgit2/libgit2/pull/4659#ref-issue-327459834
Backport libgit2 patchset mono/monodevelop#4937 https://github.com/mono/monodevelop/issues/4937
https://github.com/snyk-bot
snyk-bothttps://github.com/snyk-bot
Feb 23, 2020 https://github.com/libgit2/libgit2/pull/4659#ref-pullrequest-569442418
[Snyk] Upgrade nodegit from 0.4.1 to 0.26.4 saurabharch/Breezeblocks#1 https://github.com/saurabharch/Breezeblocks/pull/1
https://github.com/snyk-bot
snyk-bothttps://github.com/snyk-bot
Apr 22, 2020 https://github.com/libgit2/libgit2/pull/4659#ref-pullrequest-604472000
[Snyk] Upgrade nodegit from 0.24.3 to 0.26.5 aminatakonate000/Graviton-App#4 https://github.com/aminatakonate000/Graviton-App/pull/4
https://github.com/snyk-bot
snyk-bothttps://github.com/snyk-bot
May 5, 2020 https://github.com/libgit2/libgit2/pull/4659#ref-pullrequest-612362441
[Snyk] Upgrade nodegit from 0.24.3 to 0.26.5 Barnstorm-Online/ngp-openapi-generator#1 https://github.com/Barnstorm-Online/ngp-openapi-generator/pull/1
https://github.co/hiddenchars
https://github.com/libgit2/libgit2/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Flibgit2%2Flibgit2%2Fpull%2F4659
Please reload this pagehttps://github.com/libgit2/libgit2/pull/4659
https://github.com/ethomson
https://github.com/carlosmn
https://github.com/pks-t
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.