News for hackers. Stuff that matters.

A comment on Remote code execution, git, and OS X. Parent comment

Re:Remote code execution, git, and OS X by r3bl on Monday April 18, 2016 @02:15PM (#11521986)
I just checked my Ubuntu 14.04 and got this as an output:

    $ git --version
    git version 1.9.1
Unacceptable.
[ Parent | on HN ]
Re:Remote code execution, git, and OS X by pritambaral on Tuesday April 19, 2016 @04:15AM (#11525558)
14.04 is an LTS release, which is, by definition, stable. 2.8.0 (latest, what I'm running) is vastly different from 1.9.1.

Stability is not the same thing as insecurity. As long as a stable release is supported, the maintainer promises to keep it secure. If your version of git had that vulnerability, Ubuntu would have backported the patches/fixes and made it available to you.

The version number 1.9.1 is a release identifier, not a security status identifier.

[ Parent | on HN ]