Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use latest git for Windows #244

Merged
merged 2 commits into from
Apr 17, 2022
Merged

Use latest git for Windows #244

merged 2 commits into from
Apr 17, 2022

Conversation

MarkEWaite
Copy link
Contributor

Use latest git for Windows

  • Use MinGit 2.35,3, not 2.33.1 (avoid complaints about a git CVE that does not affect Jenkins agents in Docker)
  • Use git lfs 3.1.2 on Windows (use most recent release, consistent with controller in Docker)

Checklist

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira

@MarkEWaite
Use MinGit 2.35,3, not 2.33.1
e888c91 
Safeguard against directory ceiling CVE

https://nvd.nist.gov/vuln/detail/CVE-2022-24765

Medium severity CVE that is unlikely to affect Jenkins agents running in
Docker containers.
@MarkEWaite
Use git lfs 3.1.2 on Windows
39cee09
@MarkEWaite MarkEWaite requested a review from a team as a code owner April 17, 2022 20:41
@timja timja enabled auto-merge (squash) April 17, 2022 20:44
@timja timja merged commit 58eaa33 into master Apr 17, 2022
@timja timja deleted the use-latest-git-for-windows branch April 17, 2022 21:19
@MarkEWaite MarkEWaite mentioned this pull request Apr 20, 2022
Merged
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@timja timja timja approved these changes

Assignees
No one assigned
Labels
dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@MarkEWaite @timja