git remote execution vulnerability states all git clients with version <2.7.1 are vulnerable and that most linux distributions have included the fixes already.
However, as of today,
$ git --version git version 2.6.4 (Apple Git-63) $
on an up-to-date, out of the box Mac OS X dev machine.
Does this then leave most of the developers on Mac OS X that are using the apple developer tools out of the box vulnerable to this attack?
What can be done, other than
- manually installing an newer
- not using
gitfor foreign repositories at the moment?
git version 2.6.4 (Apple Git-63)does indicate the bug is unfixed.