[Hackers]

Did anyone else notice that Github fixed 5 pretty major security vulns? It's good that they fixed them, but surprised this didn't show up as a trending topic on cybersecurity sites as much as it should. They all basically allowed for code to be executed and other possible malicious attacks. It's surprising that we're in 2024 and this was just discovered and patched. Because many users are executing git commands in trusted folders, or with escalated privileges, this creates a problem where the vulns lead to a golden opportunity for hackers.

The latest update fixes these 5 git security vulnerabilities, but if you haven't yet updated then it's worth doing so if you are constantly checking out indie repositories.

[LookTheAgency]

When the government wants to hold on to their arsenal of 0days, they will rush the updates out when they are done so nobody notices. Its really surprising on the number of them though and I reckon a number more will be released soon.

[Hackers]

When the government wants to hold on to their arsenal of 0days, they will rush the updates out when they are done so nobody notices. Its really surprising on the number of them though and I reckon a number more will be released soon.

true, a lot of patches happen silently without any recognition of how long it was vulnerable, and without any solid investigation into how many people were affected.