Git Security Vulnerability

[fu]

A critical security vulnerability has been announced for Git which affects Windows/Mac. Make sure you update your clients!

The Github announcement has a bunch of useful links to clients. If you're on a Mac and use Homebrew, that one has also been updated. I believe macports has as well, but double-check to be sure.

Comments

[geekosaur]

MacPorts updated shortly after the vulnerability was announced and updates released; between this and the ntp update (if you, like many, have switched away from Apple's weird bastardized-ntpd-plus-pacemaker setup on 10.9/10.10 that works nicely for some and screws up completely for others), it's a good time to "sudo port selfupdate && sudo port upgrade outdated".

(I need to do a web page on the ntp thing mentioned above. Short version is, you may be able to fix Apple's time stuff by removing /etc/ntp.drift; the way the new stuff works, it creates the drift file on the first boot and never updates it, but the hardware of a new machine may itself drift a bit during the first few weeks of use.)

[fu]

I think I've been fairly lucky in not having any ntp issues on apple machine (my server running ubuntu always seems to drift for some reason; but I keep forgetting to dig into it g)

I appreciate the reminder about the ntp thing, btw! Pushed me to check for updates when I'd otherwise have let it just go on its normal schedule.