<feed xmlns='http://www.w3.org/2005/Atom'>
<title>git/gitk-git, branch v2.44.4</title>
<subtitle>Mirror of https://git.kernel.org/pub/scm/git/git.git/
</subtitle>
<id>https://git.shady.money/git/atom?h=v2.44.4</id>
<link rel='self' href='https://git.shady.money/git/atom?h=v2.44.4'/>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/'/>
<updated>2025-05-23T21:04:30Z</updated>
<entry>
<title>Merge branch 'js/fix-open-exec'</title>
<updated>2025-05-23T21:04:30Z</updated>
<author>
<name>Johannes Sixt</name>
<email>j6t@kdbg.org</email>
</author>
<published>2025-05-14T17:56:27Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=27fbab4898620183e608865beffd960139c04d58'/>
<id>urn:sha1:27fbab4898620183e608865beffd960139c04d58</id>
<content type='text'>
This addresses CVE-2025-27613, Gitk can create and truncate a user's
files:

When a user clones an untrusted repository and runs gitk without
additional command arguments, files for which the user has write
permission can be created and truncated. The option "Support per-file
encoding" must have been enabled before in Gitk's Preferences.  This
option is disabled by default.

The same happens when "Show origin of this line" is used in the main
window (regardless of whether "Support per-file encoding" is enabled or
not).

Signed-off-by: Johannes Sixt &lt;j6t@kdbg.org&gt;
</content>
</entry>
<entry>
<title>Merge branch 'ah/fix-open-with-stdin'</title>
<updated>2025-05-23T21:04:30Z</updated>
<author>
<name>Johannes Sixt</name>
<email>j6t@kdbg.org</email>
</author>
<published>2025-05-14T16:27:05Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=4e7e3b792e6973e09de6ddc191b86bbc245c53dd'/>
<id>urn:sha1:4e7e3b792e6973e09de6ddc191b86bbc245c53dd</id>
<content type='text'>
This addresses CVE-2025-27614, Arbitrary command execution with Gitk:

A Git repository can be crafted in such a way that with some social
engineering a user who has cloned the repository can be tricked into
running any script (e.g., Bourne shell, Perl, Python, ...) supplied by
the attacker by invoking `gitk filename`, where `filename` has a
particular structure. The script is run with the privileges of the user.

Signed-off-by: Johannes Sixt &lt;j6t@kdbg.org&gt;
</content>
</entry>
<entry>
<title>doc: switch links to https</title>
<updated>2023-11-26T01:07:05Z</updated>
<author>
<name>Josh Soref</name>
<email>jsoref@gmail.com</email>
</author>
<published>2023-11-24T03:35:13Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=d05b08cd52cfda627f1d865bdfe6040a2c9521b5'/>
<id>urn:sha1:d05b08cd52cfda627f1d865bdfe6040a2c9521b5</id>
<content type='text'>
These sites offer https versions of their content.
Using the https versions provides some protection for users.

Signed-off-by: Josh Soref &lt;jsoref@gmail.com&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>doc: update links to current pages</title>
<updated>2023-11-26T01:07:05Z</updated>
<author>
<name>Josh Soref</name>
<email>jsoref@gmail.com</email>
</author>
<published>2023-11-24T03:35:12Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=65175d9ea26bebeb9d69977d0e75efc0e88dbced'/>
<id>urn:sha1:65175d9ea26bebeb9d69977d0e75efc0e88dbced</id>
<content type='text'>
It's somewhat traditional to respect sites' self-identification.

Signed-off-by: Josh Soref &lt;jsoref@gmail.com&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>Merge gitk changes into js/gitk-fixes-from-gfw</title>
<updated>2023-05-08T16:16:57Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2023-05-08T16:16:57Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=99e70f3077a585ed32f37b8ecc863083796d3e72'/>
<id>urn:sha1:99e70f3077a585ed32f37b8ecc863083796d3e72</id>
<content type='text'>
* .tmp-gitk:
  gitk: escape file paths before piping to git log
  gitk: prevent overly long command lines
</content>
</entry>
<entry>
<title>Merge branch 'master' of git://git.ozlabs.org/~paulus/gitk</title>
<updated>2022-05-11T15:25:02Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2022-05-11T15:25:02Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=ef9b086d95e4f6676d588f4b0deebeaa76bf2a41'/>
<id>urn:sha1:ef9b086d95e4f6676d588f4b0deebeaa76bf2a41</id>
<content type='text'>
* 'master' of git://git.ozlabs.org/~paulus/gitk:
  gitk: include y coord in recorded sash position
  gitk: trivial indentation fix
</content>
</entry>
<entry>
<title>Merge remote-tracking branch 'paulus/master' into pm/gitk-update</title>
<updated>2020-10-03T17:06:27Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2020-10-03T17:06:27Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=e2b9cb1c5a45290f568681862fb27714d6e4e52b'/>
<id>urn:sha1:e2b9cb1c5a45290f568681862fb27714d6e4e52b</id>
<content type='text'>
* paulus/master:
  gitk: Resize panes correctly when reducing window size
  gitk: replace tabs with spaces
  gitk: fix the context menu not appearing in the presence of submodule diffs
  gitk: Un-hide selection in areas with non-default background color
  gitk: add diff lines background colors
  gitk: be prepared to be run in a bare repository
  gitk: Preserve window dimensions on exit when not using ttk themes
  gitk: don't highlight files after submodules as submodules
  gitk: fix branch name encoding error
  gitk: rename "commit summary" to "commit reference"
</content>
</entry>
<entry>
<title>Merge gitk to pick up emergency build fix</title>
<updated>2019-09-17T21:59:18Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2019-09-17T21:59:18Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=8a3a6817e24ae1cf1fd08fb90b4a99e6817f646d'/>
<id>urn:sha1:8a3a6817e24ae1cf1fd08fb90b4a99e6817f646d</id>
<content type='text'>
  gitk: rename zh_CN.po to zh_cn.po
</content>
</entry>
<entry>
<title>Merge branch 'master' of git://ozlabs.org/~paulus/gitk</title>
<updated>2019-09-16T17:25:08Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2019-09-16T17:25:08Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=3cb8921f74354a3a4aeaa932869acb7e6aabe630'/>
<id>urn:sha1:3cb8921f74354a3a4aeaa932869acb7e6aabe630</id>
<content type='text'>
* 'master' of git://ozlabs.org/~paulus/gitk:
  gitk: Do not mistake unchanged lines for submodule changes
  gitk: Use right colour for remote refs in the "Tags and heads" dialog
  gitk: Add Chinese (zh_CN) translation
  gitk: Make web links clickable
</content>
</entry>
<entry>
<title>Merge git://ozlabs.org/~paulus/gitk</title>
<updated>2019-03-18T02:18:49Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2019-03-18T02:18:49Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=0e94f7aa730b108f7907cfab1b2a7fba965de442'/>
<id>urn:sha1:0e94f7aa730b108f7907cfab1b2a7fba965de442</id>
<content type='text'>
* git://ozlabs.org/~paulus/gitk:
  gitk: Update Bulgarian translation (317t)
</content>
</entry>
</feed>
