New Git Submodule Vulnerability Patched

The Git community has disclosed a security vulnerability affecting the clone and submodule commands that could enable remote code execution when vulnerable machines access malicious repositories. The vulnerability, which has been assigned CVE–2018–17456 by Mitre, has been fixed in Git 2.19.1.

GitHub Release Developer Workflow Tools: Actions, Suggested Changes & Security Alerts for .NET/Java

At GitHub Universe in San Francisco, GitHub announced a number of new tools to help developers make their workflows more effective, including Actions, Suggested Changes, Security Alerts for .NET and Java, and more.

MIT Researchers Propose DAWG Defense against Spectre and Meltdown

Security researchers from MIT claim to have devised a hardware solution to prevent cache timing attacks based on speculative execution, such as Spectre and Meltdown. Their approach, named Dynamically Allocated Way Guard (DAWG), splits the processor cache in variably-sized partitions to make it impossible for processes to snoop on other processes’ cache partitions.

GitHub Octoverse 2018 Highlights

Octoverse is the annual survey that GitHub conducts among its developers to take the pulse of the community. Here the most significant highlights from this year’s edition.

GitHub Incident Analysis Shows How to Improve Service Reliability

On October 21, 2018, GitHub users experienced a degraded service during 24 hours due to an incident caused by routine maintenance work. This led to the display of outdated and inconsistent information and to the unavailability of webhooks and other internal services for 24 hours. GitHub post-incident report shows where things failed and suggests how to improve site reliability.