Apple patches vulnerable OS X Git version that put developers at risk<article>
<section class="page">
<p>Apple has released a new version of its Xcode development tool in order to patch two critical vulnerabilities in the Git source code management client.</p><p>The Git vulnerabilities, CVE‑2016‑2324 and CVE‑2016‑2315, have been known since mid-March and can be exploited when cloning a repository with a specially crafted file structure. This allows attackers to execute malicious code on systems where such cloning operations were initiated.</p><p>Xcode is an integrated development environment (IDE) used by a large number of developers to write applications for OS X and iOS. It includes a package called the OS X Command Line Tools for Xcode that contains the open-source Git client.</p><p class="jumpTag"><a href="/article/3066547/security/apple-patches-vulnerable-os-x-git-version-that-put-developers-at-risk.html#jump">To read this article in full or to leave a comment, please click here[/url]</p></section></article>
Source:
Apple patches vulnerable OS X Git version that put developers at risk