In this post I’ll show how garbage collections (GC) in Chrome may be triggered with small memory allocations in unexpected places, which was then used to cause a use-after-free bug.
Learn more about the security vulnerabilities affecting Git 2.26 and older.
You can now link issues and pull requests via the sidebar in their respective pages. Connections made here will automatically close issues once a linked pull request is merged. Learn…
Git 2.25.0 includes a new experimental git sparse-checkout command that makes the existing feature easier to use, along with some important performance benefits for large repositories.
This is the third post in a series about Ubuntu’s crash reporting system. We’ll review CVE-2019-15790, a vulnerability in apport that enables a local attacker to obtain the ASLR offsets for any process they can start (or restart).
This is the second post in our series about Ubuntu’s crash reporting system. We’ll review CVE-2019-7307, a TOCTOU vulnerability that enables a local attacker to include the contents of any file on the system in a crash report.
This post summarizes several security vulnerabilities in Ubuntu’s crash reporting system: CVE-2019-7307, CVE-2019-11476, CVE-2019-11481, CVE-2019-11484, CVE-2019-15790. When chained together, they allow an unprivileged user to read arbitrary files on the system.
We’re sharing the #myfirstrepo contest winners along with how you can easily find your first repository.
In this deep-dive, we identified and worked through sporadic latency issues with services running on Kubernetes in our environment.
California’s new privacy law comes into effect this January. Learn how you can prepare (tl;dr—don’t sell personal information) and contribute to the rules.
Sanctions impact both developers and the global open source community. Read more about how US trade sanctions affect GitHub—and how we’re advocating for as much access to code and collaboration as possible.
We’re sharing new and exciting releases from world-changing technologies to weekend side projects in the April 2019 edition of Release Radar.
Read about how collaboration on GitHub connects to free assembly and association online as part of our input to the United Nations Human Rights Council.
The Reviews filter on pull request pages can now filter for pull requests not reviewed by you. Learn more about pull requests
With their new “Star” button, every GitHub Topic gets you closer to the stuff you care about most.
Open source releases that caught our attention last month.
Everything shipped on the GitHub platform in the month of July.
Everything shipped on the GitHub platform for the month of June.
Animated GIFs can help you capture the essence of what you’re trying to share in a way that is both clear and engaging.
The search bar at the top of each page has been redesigned to help users quickly navigate to team pages, repositories, and projects that were recently visited. If you click…
A summary of content removals and and user information disclosures in 2017
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.
