Company
Date Published
Author
Taylor Blau
Word count
269
Language
English
Hacker News points
None

Summary

Git has released security patches for versions 2.24 and older to address multiple vulnerabilities, particularly emphasizing the importance of updates for Windows users due to specific CVEs that could lead to remote code execution when cloning untrusted repositories. Although users of other operating systems are also urged to update, precautions can be taken if immediate updates are not possible, such as avoiding certain commands with untrusted repositories and not cloning into NTFS mounts. While the new releases offer partial protection against exploitative pushes, they do not cover all scenarios, necessitating user updates rather than relying solely on hosting providers. These security fixes will be included in the next patch release for GitHub Enterprise Server's supported versions, and it's crucial for users to update to the newly available Git 2.24.1 to mitigate these risks.