From: Jeff King <peff@peff.net>
Date: Tue, 25 Apr 2017 10:40:50 GMT
Subject: Re: Git Shell Security Issues
Message-ID: <20170425104050.qcivu5edpzo37t7m@sigill.intra.peff.net>
In-Reply-To: <5a5b33d8-f36f-bf94-6473-a9c2a980f65d@ernw.de>

On Tue, Apr 25, 2017 at 12:29:22PM +0200, Timo Schmid wrote:

> I've found a security issue in the git-shell command, which allows authenticated
> attackers to read files, partially write files and in some configurations to execute
> shell commands in the context of the remote user.

Yikes.

> Should I report the details here or is there a security mailing list which I haven't
> found yet?

git-security@googlegroups.com

-Peff