What to do about recent remote code execution vulnerability in git (on El Capitan) The recent remote code execution bug in git looks pretty serious. The way I read this is that if I'm running a git client prior to 2.7.1, I'm susceptible to remote code execution if I use git to interact with a malicious (or compromised) repo. It seems like a manual upgrade of the git client is in order, but rootless prevents things like brew from working. (I'm currently on the latest stable Xcode 7.2.1)

What's the best way forward under El Capitan? Turn off rootless and install with brew?
Install an updated git client from source? (latest stable binary appears to be prior to 2.7.1)
Is there an updated git client in a newer version of Xcode?
If you use Homebrew it's pretty easy:

brew upgrade git
which git
=&gt; /usr/local/bin/git
git --version
=&gt; git version 2.7.3


Done.