Skip to content

v2.25.2 Security Update

Latest

Choose a tag to compare

@redimp redimp released this 11 Oct 18:49

Compare with v2.25.1

Security Update

This release fixes a vulnerability that allowed access to files outside the wiki repository via symlinks pushed with git. We strongly recommend updating to this version as soon as possible.

Security Fixes

  • Prevent reading and writing files via symlinks outside the repository, add GIT_ALLOW_EXTERNAL_SYMLINKS to allow external symlinks if needed (0c2e44a). Thanks to @Artur12555 for responsibly disclosing this issue and bringing it to our attention.

Bug Fixes

  • Highlight only changed words in partially changed diff lines, see #567 (643f597).