<feed xmlns='http://www.w3.org/2005/Atom'>
<title>git/gitk-git/gitk, branch v2.47.3</title>
<subtitle>Fork of git SCM with my patches.</subtitle>
<id>http://git.kilabit.info/git/atom?h=v2.47.3</id>
<link rel='self' href='http://git.kilabit.info/git/atom?h=v2.47.3'/>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/'/>
<updated>2025-05-23T21:04:30Z</updated>
<entry>
<title>Merge branch 'js/fix-open-exec'</title>
<updated>2025-05-23T21:04:30Z</updated>
<author>
<name>Johannes Sixt</name>
<email>j6t@kdbg.org</email>
</author>
<published>2025-05-14T17:56:27Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=27fbab4898620183e608865beffd960139c04d58'/>
<id>urn:sha1:27fbab4898620183e608865beffd960139c04d58</id>
<content type='text'>
This addresses CVE-2025-27613, Gitk can create and truncate a user's
files:

When a user clones an untrusted repository and runs gitk without
additional command arguments, files for which the user has write
permission can be created and truncated. The option "Support per-file
encoding" must have been enabled before in Gitk's Preferences.  This
option is disabled by default.

The same happens when "Show origin of this line" is used in the main
window (regardless of whether "Support per-file encoding" is enabled or
not).

Signed-off-by: Johannes Sixt &lt;j6t@kdbg.org&gt;
</content>
</entry>
<entry>
<title>Merge branch 'ah/fix-open-with-stdin'</title>
<updated>2025-05-23T21:04:30Z</updated>
<author>
<name>Johannes Sixt</name>
<email>j6t@kdbg.org</email>
</author>
<published>2025-05-14T16:27:05Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=4e7e3b792e6973e09de6ddc191b86bbc245c53dd'/>
<id>urn:sha1:4e7e3b792e6973e09de6ddc191b86bbc245c53dd</id>
<content type='text'>
This addresses CVE-2025-27614, Arbitrary command execution with Gitk:

A Git repository can be crafted in such a way that with some social
engineering a user who has cloned the repository can be tricked into
running any script (e.g., Bourne shell, Perl, Python, ...) supplied by
the attacker by invoking `gitk filename`, where `filename` has a
particular structure. The script is run with the privileges of the user.

Signed-off-by: Johannes Sixt &lt;j6t@kdbg.org&gt;
</content>
</entry>
<entry>
<title>doc: switch links to https</title>
<updated>2023-11-26T01:07:05Z</updated>
<author>
<name>Josh Soref</name>
<email>jsoref@gmail.com</email>
</author>
<published>2023-11-24T03:35:13Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=d05b08cd52cfda627f1d865bdfe6040a2c9521b5'/>
<id>urn:sha1:d05b08cd52cfda627f1d865bdfe6040a2c9521b5</id>
<content type='text'>
These sites offer https versions of their content.
Using the https versions provides some protection for users.

Signed-off-by: Josh Soref &lt;jsoref@gmail.com&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>doc: update links to current pages</title>
<updated>2023-11-26T01:07:05Z</updated>
<author>
<name>Josh Soref</name>
<email>jsoref@gmail.com</email>
</author>
<published>2023-11-24T03:35:12Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=65175d9ea26bebeb9d69977d0e75efc0e88dbced'/>
<id>urn:sha1:65175d9ea26bebeb9d69977d0e75efc0e88dbced</id>
<content type='text'>
It's somewhat traditional to respect sites' self-identification.

Signed-off-by: Josh Soref &lt;jsoref@gmail.com&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>Merge gitk changes into js/gitk-fixes-from-gfw</title>
<updated>2023-05-08T16:16:57Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2023-05-08T16:16:57Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=99e70f3077a585ed32f37b8ecc863083796d3e72'/>
<id>urn:sha1:99e70f3077a585ed32f37b8ecc863083796d3e72</id>
<content type='text'>
* .tmp-gitk:
  gitk: escape file paths before piping to git log
  gitk: prevent overly long command lines
</content>
</entry>
<entry>
<title>Merge branch 'master' of git://git.ozlabs.org/~paulus/gitk</title>
<updated>2022-05-11T15:25:02Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2022-05-11T15:25:02Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=ef9b086d95e4f6676d588f4b0deebeaa76bf2a41'/>
<id>urn:sha1:ef9b086d95e4f6676d588f4b0deebeaa76bf2a41</id>
<content type='text'>
* 'master' of git://git.ozlabs.org/~paulus/gitk:
  gitk: include y coord in recorded sash position
  gitk: trivial indentation fix
</content>
</entry>
<entry>
<title>Merge remote-tracking branch 'paulus/master' into pm/gitk-update</title>
<updated>2020-10-03T17:06:27Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2020-10-03T17:06:27Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=e2b9cb1c5a45290f568681862fb27714d6e4e52b'/>
<id>urn:sha1:e2b9cb1c5a45290f568681862fb27714d6e4e52b</id>
<content type='text'>
* paulus/master:
  gitk: Resize panes correctly when reducing window size
  gitk: replace tabs with spaces
  gitk: fix the context menu not appearing in the presence of submodule diffs
  gitk: Un-hide selection in areas with non-default background color
  gitk: add diff lines background colors
  gitk: be prepared to be run in a bare repository
  gitk: Preserve window dimensions on exit when not using ttk themes
  gitk: don't highlight files after submodules as submodules
  gitk: fix branch name encoding error
  gitk: rename "commit summary" to "commit reference"
</content>
</entry>
<entry>
<title>Merge branch 'master' of git://ozlabs.org/~paulus/gitk</title>
<updated>2019-09-16T17:25:08Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2019-09-16T17:25:08Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=3cb8921f74354a3a4aeaa932869acb7e6aabe630'/>
<id>urn:sha1:3cb8921f74354a3a4aeaa932869acb7e6aabe630</id>
<content type='text'>
* 'master' of git://ozlabs.org/~paulus/gitk:
  gitk: Do not mistake unchanged lines for submodule changes
  gitk: Use right colour for remote refs in the "Tags and heads" dialog
  gitk: Add Chinese (zh_CN) translation
  gitk: Make web links clickable
</content>
</entry>
<entry>
<title>Merge git://ozlabs.org/~paulus/gitk</title>
<updated>2017-01-18T18:27:59Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2017-01-18T18:27:59Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=ffac48d093d4b518a0cc0e8bf1b7cb53e0c3d7a2'/>
<id>urn:sha1:ffac48d093d4b518a0cc0e8bf1b7cb53e0c3d7a2</id>
<content type='text'>
* 'master' of git://ozlabs.org/~paulus/gitk:
  gitk: Remove translated message from comments
  gitk: ru.po: Update Russian translation
  gitk: Update copyright notice to 2016
  gitk: Clear array 'commitinfo' on reload
  gitk: Remove closed file descriptors from $blobdifffd
  gitk: Turn off undo manager in the text widget
  gitk: Fix Japanese translation for "marked commit"
  gitk: Fix missing commits when using -S or -G
  gitk: Use explicit RGB green instead of "lime"
  gitk: Add Portuguese translation
  gitk: Makefile: create install bin directory
  gitk: Include commit title in branch dialog
  gitk: Allow checking out a remote branch
  gitk: Add a 'rename' option to the branch context menu
</content>
</entry>
<entry>
<title>Merge branch 'master' of git://ozlabs.org/~paulus/gitk</title>
<updated>2016-03-21T01:05:10Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2016-03-21T01:05:10Z</published>
<link rel='alternate' type='text/html' href='http://git.kilabit.info/git/commit/?id=257000c617cfdc99fb2916b81268a7e971c12ca6'/>
<id>urn:sha1:257000c617cfdc99fb2916b81268a7e971c12ca6</id>
<content type='text'>
* 'master' of git://ozlabs.org/~paulus/gitk:
  gitk: Follow themed bgcolor in help dialogs
  gitk: fr.po: Sync translations with git
  gitk: Update French translation (311t)
  gitk: Update German translation
  gitk: Update Bulgarian translation (311t)
</content>
</entry>
</feed>
