Gitに脆弱性が見つかったそうなので、Mac OS X Yosemiteでgitをバージョンアップしてみます。
Gitに脆弱性、アナウンスを見てみましょう
"This is a security-fix for CVE-2014-9390, which affects users on
Windows and Mac OS X but not typical UNIX users"
— henrich (@henrich) December 19, 2014
Linuxとかメインで使ってると慌てるほどでもなさそう? http://t.co/85DYPbHBEM
— henrich (@henrich) December 19, 2014
報告の内容はこんな感じです。
http://article.gmane.org/gmane.linux.kernel/1853266
From: Junio C Hamanopobox.com>
Subject: [ANNOUNCE] Git v2.2.1 (and updates to older maintenance tracks)
Newsgroups: gmane.linux.kernel, gmane.comp.version-control.git
Date: 2014-12-18 21:11:19 GMT (3 hours and 58 minutes ago)
The latest maintenance release Git v2.2.1 is now available at
the usual places.
This is a security-fix for CVE-2014-9390, which affects users on
Windows and Mac OS X but not typical UNIX users. A set of new
releases for older maintenance tracks (v1.8.5.6, v1.9.5, v2.0.5, and
v2.1.4) are published at the same time and they contain the same fix.
以下、Gitのバージョンアップ方法です。
あらかじめ、brew(http://brew.sh/)が使えるように準備しておいてください。
brewを使ってGitをインストール
$ brew install git ==> Downloading https://downloads.sf.net/project/machomebrew/Bottles/git-2.2.1.yosemite.bottle.tar.gz ######################################################################## 100.0% ==> Pouring git-2.2.1.yosemite.bottle.tar.gz ==> Caveats The OS X keychain credential helper has been installed to: /usr/local/bin/git-credential-osxkeychain The "contrib" directory has been installed to: /usr/local/share/git-core/contrib Bash completion has been installed to: /usr/local/etc/bash_completion.d zsh completion has been installed to: /usr/local/share/zsh/site-functions ==> Summary 🍺 /usr/local/Cellar/git/2.2.1: 1356 files, 31M
インストールされたGitのバージョンを確認
$ /usr/local/bin/git --version git version 2.2.1
コマンドPATH設定を確認
$ cat /etc/paths /usr/local/bin /usr/bin /bin /usr/sbin /sbin
.bashrcを再読み込み
$ source ~/.bashrc
Gitのバージョンを確認
$ git --version git version 2.2.1
最新バージョンが使えるようになりました。
参考)
brew upgrade gitしたのにバージョンあがらない問題 - DRYな備忘録
http://otiai10.hatenablog.com/entry/2014/12/19/101654