Johannes Sixt 311d9ada3a Merge branch 'js/fix-open-exec' ...

This addresses CVE-2025-46835, Git GUI can create and overwrite a
user's files:

When a user clones an untrusted repository and is tricked into editing
a file located in a maliciously named directory in the repository, then
Git GUI can create and overwrite files for which the user has write
permission.

Signed-off-by: Johannes Sixt <j6t@kdbg.org>

2025-05-23 17:04:31 -04:00

13 KiB

Raw Blame History

View Raw