WSL/tools at 06ebfde3dee8e5028c7e65f19dac3bfbf8fbbbc4 - WSL

mirror of https://github.com/microsoft/WSL.git synced 2026-05-31 05:47:06 -05:00

Files

Ben Hillis 6a462fb2a1 Bump GitPython to 3.1.50 to address CVE-2026-42215 bypass (#40504 )

Fixes Dependabot alerts #22 and #23. GitPython <= 3.1.49 has a newline injection vulnerability in config_writer() section parameter that bypasses the CVE-2026-42215 patch and enables RCE via core.hooksPath.

Co-authored-by: Ben Hillis <benhill@ntdev.microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-05-12 01:30:34 +00:00

deploy

tools: update deploy-to-host.ps1 to automatically detect host arch (#14343 )

2026-03-03 17:13:58 -08:00

devops

Bump GitPython to 3.1.50 to address CVE-2026-42215 bypass (#40504 )

2026-05-12 01:30:34 +00:00

hooks

Add WSLC (WSL Containers) feature (#40366 )

2026-04-30 13:34:43 -07:00

test

Use TAEF ignore properties to skip tests for WSL1 / WSL2 based on testpass version property (#40459 )