Git: Security bypass A vulnerability in Git might allow remote attackers to bypass security restrictions. git 2017-06-06 2017-06-06 618126 remote 2.13.0 2.13.0


Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands.

A remote attacker could possibly bypass security restrictions and access sensitive information.

There is no known workaround at this time.

All Git users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=dev-vcs/git-2.13.0"
CVE-2017-8386 BlueKnight whissi