aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Joey Hess <joeyh@joeyh.name>2016-03-17 23:08:39 -0400
committerGravatar Joey Hess <joeyh@joeyh.name>2016-03-17 23:08:39 -0400
commite41a64631a012584de816c802c0ae5ee9b930eb2 (patch)
tree7a7650c89ac6455ea190dbee59f9d708c5dd7510
parent5a340517f9f7d2c0eab4300cfc2edd817cbe14dd (diff)
tracking bug
-rw-r--r--doc/bugs/git_security_fix.mdwn18
1 files changed, 18 insertions, 0 deletions
diff --git a/doc/bugs/git_security_fix.mdwn b/doc/bugs/git_security_fix.mdwn
new file mode 100644
index 000000000..3c25f4945
--- /dev/null
+++ b/doc/bugs/git_security_fix.mdwn
@@ -0,0 +1,18 @@
+git had some remotely exploitable security holes announced recently
+(CVE-2016-2324, CVE-2016-2315)
+
+git-annex builds that bundle git need to be updated.
+
+status of autobuilds:
+
+* Linux is fixed (all builds)
+* OSX pending
+* Windows waiting on updated release of git for Windows
+* Android is fixed (git build is untested)
+
+status of released builds:
+
+* Linux is vulnerable
+* OSX is vulnerable
+* Windows is vulnerable
+* Android is vulnerable