File: git_security_fix.mdwn

package info (click to toggle)
git-annex 6.20170101-1%2Bdeb9u2
  • links: PTS
  • area: main
  • in suites: stretch
  • size: 50,088 kB
  • sloc: haskell: 53,116; sh: 1,582; ansic: 341; makefile: 292; perl: 144
file content (20 lines) | stat: -rw-r--r-- 513 bytes parent folder | download 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
 
git had some remotely exploitable security holes announced recently
(CVE-2016-2324, CVE-2016-2315)

git-annex builds that bundle git need to be updated.

status of autobuilds:

* Linux is fixed (all builds)
* OSX is fixed
* Windows does not bundle git
* Android is fixed (git build is untested)

status of released builds:

* Linux is fixed (all builds)
* OSX is fixed (yosemite only; old builds vulnerable so removed)
* Windows does not bundle git
* Android is fixed (git build is untested)

[[done]] --[[Joey]]