Remote Code Execution in all Git versions (client and server) (ma.ttias.be) 30 points by Rockslide 10y ago ↗ HN
[–] Rockslide 10y ago ↗ < 2.7.1 - not sure why this was stripped from the title, I included it ;) [–] mikekozak 10y ago ↗ Doesn't look like it's quite there:"I saw changes were pushed in master, so I thought the next version (which was 2.7.1) would be the one which will include the fix.But as pointed out on https://security-tracker.debian.org/tracker/CVE-2016-2324 no versions including the fixes were released yet, and even 2.7.3 still include path_name(). I didn't checked the code (Sorrrry)."
[–] mikekozak 10y ago ↗ Doesn't look like it's quite there:"I saw changes were pushed in master, so I thought the next version (which was 2.7.1) would be the one which will include the fix.But as pointed out on https://security-tracker.debian.org/tracker/CVE-2016-2324 no versions including the fixes were released yet, and even 2.7.3 still include path_name(). I didn't checked the code (Sorrrry)."
4 comments
[ 0.19 ms ] story [ 24.9 ms ] thread"I saw changes were pushed in master, so I thought the next version (which was 2.7.1) would be the one which will include the fix.
But as pointed out on https://security-tracker.debian.org/tracker/CVE-2016-2324 no versions including the fixes were released yet, and even 2.7.3 still include path_name(). I didn't checked the code (Sorrrry)."
brew update
brew upgrade git