+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: HOLY SHIT GIT MADE A MISTAKE!!!! (/Thread-HOLY-SHIT-GIT-MADE-A-MISTAKE)
HOLY SHIT GIT MADE A MISTAKE!!!! - meow - 03-16-2016
Server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublished CVE-2016-2324 and CVE‑2016‑2315).
http://seclists.org/oss-sec/2016/q1/645
RE: HOLY SHIT GIT MADE A MISTAKE!!!! - pvnk - 03-16-2016
Thanks for such a cool share!
RE: HOLY SHIT GIT MADE A MISTAKE!!!! - Oni - 03-16-2016
Glad I don't need to use git for anything.
RE: HOLY SHIT GIT MADE A MISTAKE!!!! - mothered - 03-16-2016
Just goes to show that everything has a vulnerability or security risk to some degree.
Something of this nature would be (or should be) fixed/patched pretty quick.
RE: HOLY SHIT GIT MADE A MISTAKE!!!! - 817_091_278 - 10-09-2016
The owners are humans - and humans make mistake. This isn't shocking.
RE: HOLY SHIT GIT MADE A MISTAKE!!!! - pvnk - 10-10-2016
(10-09-2016, 11:58 PM)817_091_278 Wrote: The owners are humans - and humans make mistake. This isn't shocking.
I'm pretty electrified to be quite honest.
RE: HOLY SHIT GIT MADE A MISTAKE!!!! - Inori - 10-10-2016
Git is usually my svc of choice, but I don't use it in any production code so this doesn't affect me. Nice share though.
In terms of the logistics, buffer attacks usually take forever to notice. In the case of Heartbleed with OpenSSL for example, it took 20-something years to find and patch.