All articles tagged with #git
Git 2.55 ships with Rust support enabled by default (opt-out via NO_RUST), while keeping Rust tooling optional. It also adds the git history fixup for applying changes to older staged commits and improves repacking with incremental multi-pack indexes; the history sub-command remains experimental. Full release notes and a GitHub blog overview provide more details.
Rapid7 reports a critical Gogs vulnerability (CVSS 9.4) that lets any authenticated user achieve remote code execution by crafting a pull request with a malicious branch name that injects a --exec command into git rebase during the Rebase before merging step; no admin rights are required and an attacker can trigger it simply by registering and creating a repository with rebase merging enabled. If unpatched (as of March 17, 2026), this could allow server compromise, access to all repos, credential dumps, cross-tenant data breaches, or further network access. Mitigations include disabling new registrations, restricting repository creation, and auditing rebase merge settings; a Metasploit module exists to automate the exploit. Estimates put internet-facing Gogs instances around 1,141, likely higher in internal deployments behind VPNs.
X.Org Server has retired its long-used 'master' branch and shifted development to 'main', starting from a 2024 baseline and selectively reintegrating patches deemed acceptable while dropping questionable ones for a cleaner code state.
CISA has added three actively exploited vulnerabilities affecting Citrix Session Recording and Git to its KEV catalog, with patches already available for two of the Citrix flaws and a proof-of-concept exploit released for the Git vulnerability. Federal agencies are required to implement mitigations by September 15, 2025.
Git offers a powerful feature called interactive rebase that allows users to fix mistakes in commit messages or modify commits. By using the "git rebase -i" command, users can edit, drop, squash, or fixup commits. This feature is especially useful when making changes to the last commit or when rebasing to a commit beyond the one that needs to be changed. Git's interactive rebase provides flexibility and control over commit history, making it a valuable tool for developers.
Gitless is an alternative to Git that simplifies many of its features, including a tracking system that automates commits and a simplified branching system. It has a simplified command line interface and is backwards-compatible with Git. It is a powerful tool for those who don't need the full feature set of Git and decreases the steep learning curve associated with it.