Skip to content

Commit d3ce2f7

Browse files
author
Edward Thomson
committed
Security info: tweak whitespace
1 parent 9ea61b9 commit d3ce2f7

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

security/index.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,10 @@ Information about security advisories affecting libgit2 and the releases that
88
provide resolution.
99

1010
* **[libgit2 v0.24.6](https://github.com/libgit2/libgit2/releases/tag/v0.24.6)** and **[libgit2 v0.25.1](https://github.com/libgit2/libgit2/releases/tag/v0.25.1)**, January 9th, 2017
11-
Includes two fixes, one performs extra sanitization for some edge cases in the Git Smart Prot
12-
ocol which can lead to attempting to parse outside of the buffer.<br>
13-
The second fix affects the certificate check callback. It provides a `valid` parameter to indicate whether the native cryptographic library considered the certificate to be correct. This parameter is always `1`/`true` before these releases leading to a possible MITM.<br>
11+
Includes two fixes, one performs extra sanitization for some edge cases in the Git Smart Protocol which can lead to attempting to parse outside of the buffer.
12+
13+
The second fix affects the certificate check callback. It provides a `valid` parameter to indicate whether the native cryptographic library considered the certificate to be correct. This parameter is always `1`/`true` before these releases leading to a possible MITM.
14+
1415
This does not affect you if you do not use the custom certificate callback or if you do not take this value into account. This does affect you if you use pygit2 or git2go regardless of whether you specify a certificate check callback.
1516

1617
* **[libgit2 v0.22.1](https://github.com/libgit2/libgit2/releases/tag/v0.22.1)**, January 16, 2015

0 commit comments

Comments
 (0)