1f010d6bdf
We presently use the ".txt" extension for our AsciiDoc files. While not wrong, most editors do not associate this extension with AsciiDoc, meaning that contributors don't get automatic editor functionality that could be useful, such as syntax highlighting and prose linting. It is much more common to use the ".adoc" extension for AsciiDoc files, since this helps editors automatically detect files and also allows various forges to provide rich (HTML-like) rendering. Let's do that here, renaming all of the files and updating the includes where relevant. Adjust the various build scripts and makefiles to use the new extension as well. Note that this should not result in any user-visible changes to the documentation. Signed-off-by: brian m. carlson <sandals@crustytoothpaste.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>
17 lines
520 B
Plaintext
17 lines
520 B
Plaintext
Git v2.17.4 Release Notes
|
|
=========================
|
|
|
|
This release is to address the security issue: CVE-2020-5260
|
|
|
|
Fixes since v2.17.3
|
|
-------------------
|
|
|
|
* With a crafted URL that contains a newline in it, the credential
|
|
helper machinery can be fooled to give credential information for
|
|
a wrong host. The attack has been made impossible by forbidding
|
|
a newline character in any value passed via the credential
|
|
protocol.
|
|
|
|
Credit for finding the vulnerability goes to Felix Wilhelm of Google
|
|
Project Zero.
|