mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

tracking bug

Browse source
This commit is contained in:
Joey Hess 2016-03-17 23:08:39 -04:00
parent e029eb8b61
commit b418bed8d7
Failed to extract signature
1 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
doc/bugs/git_security_fix.mdwn Normal file
View file

@ -0,0 +1,18 @@
git had some remotely exploitable security holes announced recently
(CVE-2016-2324, CVE-2016-2315)
git-annex builds that bundle git need to be updated.
status of autobuilds:
* Linux is fixed (all builds)
* OSX pending
* Windows waiting on updated release of git for Windows
* Android is fixed (git build is untested)
status of released builds:
* Linux is vulnerable
* OSX is vulnerable
* Windows is vulnerable
* Android is vulnerable