Git Security: Further Reading

In my talk at Git Merge today, I mentioned that there were some other difficulties handling security issues in Git. Here's some more information:

• Git vulnerability
  Some additional ways to trigger the case-insensitive .git security issue in CVE 2014-9390.
• Git vulnerability with submodules
  Another security issue in Git.
• Upgrading Git for CVE 2017-1000117
  How to upgrade Git for the submodule security issue (above).