We want to ensure that developers are aware of the potential risks and that they update all Git clients and servers as soon as possible.
Southfield, MI (PRWEB) April 27, 2016
Future Hosting, a specialized VPS hosting and dedicated server hosting provider, has warned users of the Git version control system to update Git clients and servers as soon as possible. Recently discovered vulnerabilities in the application, which were disclosed late last month (CVE-2016-2315, CVE-2016-2324), put Git repositories at risk of a remote code execution vulnerability that could allow an attacker to compromise servers used for source control.
The vulnerabilities are present in the Git 2.x, 1.9, and 1.7 branches. Git users should immediately update both Git servers and clients using their Linux distribution’s package manager. Most major distributions, including CentOS, now have patched versions in their repository.
“Future Hosting provides managed hosting services for thousands of developers and software projects, with both self-hosted Git repositories and BitBucket SaaS hosting plans,” said Maulesh Patel, VP of Operations of Future Hosting, “We want to ensure that developers are aware of the potential risks and that they update all Git clients and servers as soon as possible.”
As a provider of server hosting for developers and Git users, Future Hosting is concerned that the vulnerabilities have not been widely publicised, leaving many developers and projects vulnerable. The attack has the potential to allow remote code execution with the creation of a malicious Git repository.
Git is used by millions of developers and, since its initial release by Linux creator Linus Torvalds, has become the de facto standard for open source version control. Many popular open source and proprietary software projects use Github. Any exploitable vulnerability could put those projects at risk.
About Future Hosting
Founded in 2001, Future Hosting is a privately held leading Internet solutions provider specializing in managed hosting, including Dedicated Servers, Virtual Private Servers, and Hybrid Virtual Private Servers. The company has built a strong reputation for its high-quality service, innovative pricing models, and 3-hour Service Level Agreement. Future Hosting is based in Southfield, Michigan. For more information, visit http://www.futurehosting.com