今日,git爆出远程执行代码漏洞(CVE-2016-2324),攻击者可利用这个漏洞来引发目标系统的缓冲区溢出,从而在目标主机中实现远程代码执行。viagit
虽然尚未尝试,可是升升级老是好的。centos
# yum install curl-devel expat-devel gettext-devel openssl-devel zlib-devel # yum install gcc perl-ExtUtils-MakeMaker
# cd /usr/src # wget https://www.kernel.org/pub/software/scm/git/git-2.7.3.tar.gz # tar xzf git-2.7.0.tar.gz
# cd git-2.7.0 # make prefix=/usr/local/git all # make prefix=/usr/local/git install # echo "export PATH=$PATH:/usr/local/git/bin" >> /etc/bashrc # source /etc/bashrc
# git --version
centos自带git,7.x版本自带git 1.8.3.1(应该是,也可能不是),安装新版本以前须要使用yun remove git
卸载(安装后卸载也能够)。bash
执行make prefix=/usr/local/git all
时,可能会报错:make: * [git-credential-store] Error 1,此时能够使用如下命令代替curl
# ./configure --without-iconv # make CFLAGS=-liconv prefix=/usr/local/git all # make CFLAGS=-liconv prefix=/usr/local/git install
能够成功安装和使用,不知道有没有啥反作用。url