Security · High impactFan score 45 · Tier B
Git security vulnerabilities announced
Git on the GitHub Blog · By Elijah Newren ·
The Brief
- The Git project released new versions fixing six security vulnerabilities.
- The flaws include arbitrary code execution when recursively cloning a malicious repository.
- Other issues allow writes to unintended files and memory corruption when processing merges or binary patches.
Why it matters
Cloning an untrusted repository with an unpatched Git version can lead to arbitrary code execution on a developer's machine, so updating Git is a priority.
Who’s affected
- Developers and teams using Git
What to do
- Upgrade Git to the new versions released by the Git project
- #git
- #security
- #vulnerability
- #code-execution
- #version-control
Today, the Git project is releasing new versions to address six security vulnerabilities. These include arbitrary code execution when recursively cloning a malicious repository, writes to unintended files, and memory corruption when processing merges or binary patches. The fixes…
Timeline
Git project releases new versions fixing six security vulnerabilities
The GitHub Blog
Git security vulnerabilities announced