Re: [gits] Git Client Security Udate

[Robert Ricci <ricci@cs.utah.edu>]

For what it's worth, this appears to only affect clients with
case-insensitive filesystems (Mac and Windows) - the exploit seems to be
checking in something like .Git/config into the repo. On a
case-insensitive FS, that will cause your client to overwrite
.git/config, and since there are places in there where you can put
scripts...

On 12/18, Eric Eide wrote:
> https://github.com/blog/1938-git-client-vulnerability-announced
> http://article.gmane.org/gmane.linux.kernel/1853266
> 
> Basically, update your git client.
> 
> Eric.
> 
> -- 
> -------------------------------------------------------------------------------
> Eric Eide <eeide@cs.utah.edu>  .         University of Utah School of Computing
> http://www.cs.utah.edu/~eeide/ . +1 (801) 585-5512 voice, +1 (801) 581-5843 FAX