<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/libgit2.git/src/libgit2/repository.c, branch ethomson/objectformat</title>
<subtitle>github.com: libgit2/libgit2.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/'/>
<entry>
<title>repo: don't overwrite repo format version on reinit</title>
<updated>2022-12-03T20:37:15+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-12-03T14:32:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=3b676c8d889ec4554fc0b66362a6a37a5e04e529'/>
<id>3b676c8d889ec4554fc0b66362a6a37a5e04e529</id>
<content type='text'>
Ensure that we maintain the `core.repositoryFormatVersion` value instead
of always overwriting it with the default.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Ensure that we maintain the `core.repositoryFormatVersion` value instead
of always overwriting it with the default.
</pre>
</div>
</content>
</entry>
<entry>
<title>repo: internal setter for `objectformat`</title>
<updated>2022-12-03T20:37:15+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-12-03T13:07:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=2770d131bc3b86d234758b9623e186df5f66c4d1'/>
<id>2770d131bc3b86d234758b9623e186df5f66c4d1</id>
<content type='text'>
Provide an internal function to set the repository's `objectformat`,
both in the internal object and in the configuration.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Provide an internal function to set the repository's `objectformat`,
both in the internal object and in the configuration.
</pre>
</div>
</content>
</entry>
<entry>
<title>repo: understand the `objectformat` extension</title>
<updated>2022-12-03T20:37:15+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-09-19T14:39:58+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=975d210c5466cd9781fa8b61aad10d47a6d6a988'/>
<id>975d210c5466cd9781fa8b61aad10d47a6d6a988</id>
<content type='text'>
Teach the repository about the `objectformat` extension, supporting
`sha1` always and `sha256` when the experimental sha256 support is
active.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Teach the repository about the `objectformat` extension, supporting
`sha1` always and `sha256` when the experimental sha256 support is
active.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add support for "safe.directory *"</title>
<updated>2022-11-19T11:00:43+00:00</updated>
<author>
<name>Sven Strickroth</name>
<email>email@cs-ware.de</email>
</author>
<published>2022-11-19T10:56:07+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=594bd70b84247eb5fb4b04defb362496b8c85a2b'/>
<id>594bd70b84247eb5fb4b04defb362496b8c85a2b</id>
<content type='text'>
Signed-off-by: Sven Strickroth &lt;email@cs-ware.de&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Sven Strickroth &lt;email@cs-ware.de&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>repo: ignore missing 'safe.directory' config during ownership checks</title>
<updated>2022-10-01T04:08:49+00:00</updated>
<author>
<name>Kevin Saul</name>
<email>kevinsaul@gmail.com</email>
</author>
<published>2022-10-01T04:08:49+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=93c071ac4072bc0cda56bfef371b4890fec40a89'/>
<id>93c071ac4072bc0cda56bfef371b4890fec40a89</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>sha256: indirection for experimental functions</title>
<updated>2022-07-14T02:50:33+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-07-14T02:25:11+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=b43567d655b6fbc562a165095a6980d19c4ae278'/>
<id>b43567d655b6fbc562a165095a6980d19c4ae278</id>
<content type='text'>
The experimental function signature is only available when
`GIT_EXPERIMENTAL_SHA256` is enabled.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The experimental function signature is only available when
`GIT_EXPERIMENTAL_SHA256` is enabled.
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request #6191 from libgit2/ethomson/sha256_poc</title>
<updated>2022-07-14T01:08:04+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-07-14T01:08:04+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=433a133402fae298f8ee7613bcfd997c2712d269'/>
<id>433a133402fae298f8ee7613bcfd997c2712d269</id>
<content type='text'>
RFC: SHA256 proof of concept</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
RFC: SHA256 proof of concept</pre>
</div>
</content>
</entry>
<entry>
<title>repo: allow users running with sudo to access their repositories</title>
<updated>2022-07-12T18:12:48+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-07-06T03:47:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=ed24b8bacc739b072a789ca7396e46bd751ca2ec'/>
<id>ed24b8bacc739b072a789ca7396e46bd751ca2ec</id>
<content type='text'>
In the ownership checks implemented for CVE-2022-24765, we disallowed
users to access their own repositories when running with `sudo`.

Examine the `SUDO_UID` environment variable and allow users running
with `sudo`. This matches git's behavior.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In the ownership checks implemented for CVE-2022-24765, we disallowed
users to access their own repositories when running with `sudo`.

Examine the `SUDO_UID` environment variable and allow users running
with `sudo`. This matches git's behavior.
</pre>
</div>
</content>
</entry>
<entry>
<title>repo: validate gitdir and gitlink ownership</title>
<updated>2022-07-12T18:12:48+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-07-02T14:19:33+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=af9e00321f06383ccf61f4ca9616716bec0eb2da'/>
<id>af9e00321f06383ccf61f4ca9616716bec0eb2da</id>
<content type='text'>
To match git's behavior with CVE 2022-29187, validate not only the
working directory, but also the gitdir and gitlink (if it exists). This
a follow up to CVE-2022-24765 that was fixed earlier.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
To match git's behavior with CVE 2022-29187, validate not only the
working directory, but also the gitdir and gitlink (if it exists). This
a follow up to CVE-2022-24765 that was fixed earlier.
</pre>
</div>
</content>
</entry>
<entry>
<title>repo: allow admin owned configs by admin users</title>
<updated>2022-07-07T14:38:01+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@edwardthomson.com</email>
</author>
<published>2022-07-04T20:03:10+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=56aaaf532d9364cea146037023b64c2ee5e0bcb6'/>
<id>56aaaf532d9364cea146037023b64c2ee5e0bcb6</id>
<content type='text'>
Allow users in the administrator group to use git configs that are owned
by administrators.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Allow users in the administrator group to use git configs that are owned
by administrators.
</pre>
</div>
</content>
</entry>
</feed>
