Git clients vulnerable

Damien Tournoud
CTO
19 Dec 2014

On December 19, 2014, the maintainers of Git, the code revisioning tool used by Platform.sh, announced a vulnerability affecting Mac OS X and Windows users. Platform.sh customers are advised to upgrade their Git clients.

Who is vulnerable, and what to do?

The vulnerability affects Mac OS X and Windows users. Linux and Unix users are not affected. Git hosting services like Github.com and Bitbucket.com are not affected. Platform.sh, which hosts Git repositories for its customers, is also not affected.

Git for Windows can be used to upgrade Windows clients. Homebrew can be used to upgrade Git on Mac OS X.

Platform.sh infrastructure not at risk

As the vulnerability is a client-side issue, and because Platform.sh runs 100% Linux infrastructure, Platform.sh’s Git servers are not vulnerable to this problem.