
3 changed files with 18 additions and 2 deletions
@ -0,0 +1,16 @@
@@ -0,0 +1,16 @@
|
||||
Git v2.17.6 Release Notes |
||||
========================= |
||||
|
||||
This release addresses the security issues CVE-2021-21300. |
||||
|
||||
Fixes since v2.17.5 |
||||
------------------- |
||||
|
||||
* CVE-2021-21300: |
||||
On case-insensitive file systems with support for symbolic links, |
||||
if Git is configured globally to apply delay-capable clean/smudge |
||||
filters (such as Git LFS), Git could be fooled into running |
||||
remote code during a clone. |
||||
|
||||
Credit for finding and fixing this vulnerability goes to Matheus |
||||
Tavares, helped by Johannes Schindelin. |
Loading…
Reference in new issue