Git 2.38.1 Released For Two New Security Vulnerabilities

[phoronix]

Phoronix: Git 2.38.1 Released For Two New Security Vulnerabilities

Git 2.38.1 was just released along with updates to older versions, including the new point releases of v2.30.6, v2.31.5, v2.32.4, v2.33.5, v2.34.5, v2.35.5, v2.36.3, and v2.37.4. The big set of Git updates today is due to two more security issues coming to light...

https://www.phoronix.com/news/Git-2.38.1-Released

[cynic]

how is it that nobody yet came here to say that "we" need to rewrite git in rust?

[archkde]

how is it that nobody yet came here to say that "we" need to rewrite git in rust?

Only CVE-2022-39360 would have been prevented by Rust. Also, people demanding rewrites in Rust from others are pretty much a straw-man. Actual initiatives to rewrite things in Rust either come from the inside, or from people actually having done the rewrite (usually with impressive results). That said, there is actually a VCS written in Rust, namely Pijul (which looks more like a rewrite of darcs than of git, however).

[GrayShade]

Only CVE-2022-39360 would have been prevented by Rust. Also, people demanding rewrites in Rust from others are pretty much a straw-man. Actual initiatives to rewrite things in Rust either come from the inside, or from people actually having done the rewrite (usually with impressive results). That said, there is actually a VCS written in Rust, namely Pijul (which looks more like a rewrite of darcs than of git, however).

There's also https://github.com/Byron/gitoxide.

But I agree, the RIIR comments are annoying, especially when they come from people who haven't touched Rust. I've seen many people who might have otherwise used the language insist that the community is awful, just because of them.