git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Media query - Git flaw

From
ABAdam Bannister <adam.bannister@portswigger.net>
Date
Apr 21, 2020, 08:46 UTC
Message-ID
<CAJQu+boAfXKG_Kugmh+k2O_AP2LmGbZ+R5XS0rw9==7OtULEZg@mail.gmail.com>
In-Reply-To
<20200415154711.GD2464307@coredump.intra.peff.net>

Forgot to say thanks for all your help and share the link! https://portswigger.net/daily-swig/git-security-newline-injection-bug-tricked-version-control-system-into-leaking-usernames-and-password

Much appreciated...
On Wed, 15 Apr 2020 at 16:47, Jeff King <peff@peff.net> wrote:
Show 14 quoted lines
>
> On Wed, Apr 15, 2020 at 08:19:18AM -0700, Junio C Hamano wrote:
>
> > > What is your advice to Git users?
> >
> > Release is announced and users are urged to upgrade, like you wrote
> > on your article at The Daily Swig.
>
> There's a little more detail and some workarounds discussed in the
> advisory at:
>
>  https://github.com/git/git/security/advisories/GHSA-qm7j-c969-7j4q
>
> -Peff
-- 
Adam Bannister
The Daily Swig
https://portswigger.net/daily-swig
Previous: Jeff King
Message 4 of 4 in “Media query - Git flaw”
  1. Adam BannisterApr 15, 2020
  2. Junio C HamanoApr 15, 2020
  3. Jeff KingApr 15, 2020
  4. Adam BannisterApr 21, 2020

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.