Security · High impactFan score 45 · Tier B
Git fixes six vulnerabilities, including code execution during recursive clones
Help Net Security · By Anamarija Pogorelec ·
The Brief
- The Git project released security updates fixing six vulnerabilities.
- The flaws could let attackers execute code, write to unintended files or cause memory corruption.
- Code execution is possible during recursive clones of malicious repositories.
Why it matters
Cloning or processing untrusted repositories or specially crafted input with an unpatched Git can compromise a developer's machine.
Who’s affected
- Developers and teams running Git
- Anyone cloning untrusted repositories with Git
What to do
- Update Git to a release that includes the security fixes
- Avoid recursive clones of untrusted repositories until patched
- #git
- #security
- #vulnerability
- #code-execution
- #memory-corruption
The Git project has released security updates addressing six vulnerabilities that could allow attackers to execute code, write to unintended files or cause memory corruption when Git processes malicious repositories or other specially prepared input. Code execution during cloning…