Use to use homebrew to upgrade to non-vulnerable version of git (CVE-2014-9390)

Question

Today I installed git via homebrew (brew install git). It downloaded git version 2.1.2.

Downloading https://downloads.sf.net/project/machomebrew/Bottles/git-2.1.2.m

However, when I run heroku apps I get Your version of git is 2.1.2. Which has serious security vulnerabilities.

I thought homebrew would install the latest, patched version that addresses the recent git security vulnerability (https://blog.heroku.com/archives/2014/12/24/update_your_git_clients_on_windows_and_os_x).

Also, when I run brew update git I get Error: git-2.1.2 already installed

Any thoughts?

Answer 1

You need to make sure your Homebrew installation is up to date by running brew update. That updates both brew itself and the recipes used to install software.