It's really a moot point as this was AND still is a common problem no matter the OS. I fail to see any releases of any OS that's secure out of the box.
Remote code execution, git, and OS X
21–30 of 385 posts
Re: Remote code execution, git, and OS X
#22Isn't this why projects such as Homebrew thrive? For me personally, I just `brew install git`, and I keep it updated that way (`brew update && brew upgrade`)... Sure, Apple should ship a fix, but there are ways around it for now.
Sure, but your /usr/bin/git is still vulnerable. You're one config mistake (or maybe running a "malicious" script) away from executing.
Re: Remote code execution, git, and OS X
#23$ brew install git $ git --version git version 2.8.1
Now grep your system for `/usr/bin/git`.
Re: Remote code execution, git, and OS X
#24Did Apple not backport the security fixes to the version of git they ship?
Re: Remote code execution, git, and OS X
#25$ brew install git $ git --version git version 2.8.1
Weird, I got git 2.6.1 using the same command:
$ brew install git
==> Downloading https://homebrew.bintray.com/bottles/git-2.6.1.el_capitan.bo...
$ git version
git version 2.6.1
$ brew upgrade git
Error: git 2.6.1 already installed
Re: Remote code execution, git, and OS X
#26Sensationalism at it's finest. Just use the homebrew version, it will eventually get fixed in OSX proper.
Re: Remote code execution, git, and OS X
#27$ brew install git $ git --version git version 2.8.1
[deleted]
Re: Remote code execution, git, and OS X
#28Isn't this why projects such as Homebrew thrive? For me personally, I just `brew install git`, and I keep it updated that way (`brew update && brew upgrade`)... Sure, Apple should ship a fix, but there are ways around it for now.
Sure, but your /usr/bin/git is still vulnerable. You're one config mistake (or maybe running a "malicious" script) away from executing.
I'm pretty sure git isn't the only thing that is (or will be) vulnerable. Vulnerabilities happen, it's a fact of life. You will have to constantly update your systems no matter which OS you run.
Re: Remote code execution, git, and OS X
#29$ brew install git $ git --version git version 2.8.1
Weird, I got git 2.6.1 using the same command: $ brew install git ==> Downloading https://homebrew.bintray.com/bottles/git-2.6.1.el_capitan.bo... $ git version git version 2.6.1 $ brew upgrade git Error: git 2.6.1 already installed
I did the same and its refusing to let me replace it.
Re: Remote code execution, git, and OS X
#30[deleted]