git-annex/doc/bugs/git_security_fix.mdwn

20 lines
513 B
Markdown

git had some remotely exploitable security holes announced recently
(CVE-2016-2324, CVE-2016-2315)
git-annex builds that bundle git need to be updated.
status of autobuilds:
* Linux is fixed (all builds)
* OSX is fixed
* Windows does not bundle git
* Android is fixed (git build is untested)
status of released builds:
* Linux is fixed (all builds)
* OSX is fixed (yosemite only; old builds vulnerable so removed)
* Windows does not bundle git
* Android is fixed (git build is untested)
[[done]] --[[Joey]]