3 ms·
Did Apple not backport the security fixes to the version of git they ship?
by caf 11y ago
Did Apple not backport the security fixes to the version of git they ship?
- dchest 11y agoLooks like no: https://opensource.apple.com/source/Git/Git-58/src/git/revision.c https://opensource.apple.com/source/Git/Git-58/src/git/revis... Function is path_name, nlen type should be size_t and there shouldn't be integer overflow in the first loop.
- dchest 11y agoHmm, wait, it's Git-58, not Git-63. Edit: OK, Xcode 7.2 security notes mentions Git vulnerability CVE-2015-7082 (older than the ones in questions), and Xcode 7.3 doesn't mention any fixed vulnerabilities in Git, so I guess it's vulnerable and NOT patched.