Git security fix

Information, contacts and source code for ports to Linux, Windows, etc.

Moderators: winston, another_commander

Post Reply
Astrobe
---- E L I T E ----
---- E L I T E ----
Posts: 580
Joined: Sun Jul 21, 2013 12:26 pm

Git security fix

Post by Astrobe » Sat Aug 12, 2017 7:57 am

A malicious third-party can give a crafted "ssh://..." URL to an
unsuspecting victim, and an attempt to visit the URL can result in
any program that exists on the victim's machine being executed.
Such a URL could be placed in the .gitmodules file of a malicious
project, and an unsuspecting victim could be tricked into running
"git clone --recurse-submodules" to trigger the vulnerability.
http://marc.info/?l=git&m=150238802328673&w=2

Post Reply