Homebrew just updated ( https://github.com/Homebrew/homebrew/pull/35105 ), so Homebrew users should be covered by brew update && brew upgrade git
brew update will use `git clone`, so yeah...
Git client vulnerability announced
31–40 of 191 posts
Re: Git client vulnerability announced
#32Where can I find fixed git-related binaries without having to build from source myself? (Sorry, I'm lazy)
The announcement includes several links to binaries. Is there one you need that's missing?
The blog post on Github.com only includes links to Github for Mac binaries, not git proper. The link in the blog post to kernel.org has tarballs of source, not binaries.
Did I miss something?
Re: Git client vulnerability announced
#33Link to the patch that fixed it: https://github.com/git/git/commit/cc2fc7c
Re: Git client vulnerability announced
#34Earlier quoted context omitted.
Wow downvoting because I ask for binaries instead of source? Majority of people reading this want a fast, immediate solution from a trustworthy source. edit: obvious places still haven't updated. git-scm still provides 6-month-old binaries
[deleted]
Please point to git binaries within the Github.com blog post. There are binaries for Github for Mac/Win, not git proper. I only found source code tarballs on Kernel.org, not binaries.
Re: Git client vulnerability announced
#35Re: Git client vulnerability announced
#36Re: Git client vulnerability announced
#37"Otherwise, an unsuspecting user can run git pull from an innocuous-looking-but-malicious repository and have the meta-information in her repository overwritten, or executable hooks installed by the owner of that repository she pulled from (i.e. an attacker)." [1]
You could pull down git hooks that root your box, pretty intense hack, update now!
1. http://git-blame.blogspot.com.es/2014/12/git-1856-195-205-21...
Re: Git client vulnerability announced
#38"or executable hooks installed by the owner of that repository she pulled from (i.e. an attacker)."
You could pull down git hooks that root your box, pretty intense hack, update now!
Re: Git client vulnerability announced
#39Also case insensitive file systems has other problems with git, if your team has a sensitive one. Mac comes with defaulted to insensitive and that is not good.
Re: Git client vulnerability announced
#40There does not appear to be an updated version of git for cygwin just yet.