News for hackers. Stuff that matters.

A comment on Git security vulnerability announced. Parent comment

Re:Git security vulnerability announced by geoffeg on Tuesday April 12, 2022 @09:38PM (#31010300)
I'm guessing the goal is to lock down git's security for any potential future vulnerability. If some security issue was discovered with git that could be exploited with a malicious .git directory structure, requiring git directories to be owned by the logged-in user will reduce the impact.
[ Parent | on HN ]
Re:Git security vulnerability announced by hadlock on Tuesday April 12, 2022 @10:38PM (#31010632)
Or, an exploit was discovered, and quietly patched out recently
[ Parent | on HN ]
Re:Git security vulnerability announced by hadlock on Tuesday April 12, 2022 @11:31PM (#31010925)
Oh, there it is: https://github.blog/2022-04-12-git-security-vulnerability-an...
[ Parent | on HN ]
Re:Git security vulnerability announced by hadlock on Wednesday April 13, 2022 @12:16AM (#31011159)
Replying to myself again, apparently the thread title changed from "hey git won't let you do this thing anymore" to "here's the CVE", and changed the link too. sorry for the confusion
[ Parent | on HN ]