Advisories for Golang/Github.com/Github/Hub package

The am function in lib/hub/commands.rb in hub allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file.