The JGit fix is included in git client plugin 1.13.0. Git client plugin 1.13.0 was released 18 Dec 2014.
See https://wiki.jenkins-ci.org/display/JENKINS/Git+Client+Plugin#GitClientPlugin-ChangeLog Thanks, Mark Waite On Tue, Dec 23, 2014 at 7:40 AM, Mike Chmielewski < mike.chmielew...@gmail.com> wrote: > Github's announcement here: > https://github.com/blog/1938-git-client-vulnerability-announced > > Since JGit is on the list as having made fixes, is there any ETA on when > that will get into a Jenkins release? > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jenkinsci-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/f2604f08-41d0-42fd-970b-7d90624ba44c%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-users/f2604f08-41d0-42fd-970b-7d90624ba44c%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Thanks! Mark Waite -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAO49JtFSX5Aqc0q0Kgvt0HV-7F4uT5czUcVDFgyNOSw03JBs4Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.