| 1 | Git v2.17.6 Release Notes |
| 2 | ========================= |
| 3 | |
| 4 | This release addresses the security issues CVE-2021-21300. |
| 5 | |
| 6 | Fixes since v2.17.5 |
| 7 | ------------------- |
| 8 | |
| 9 | * CVE-2021-21300: |
| 10 | On case-insensitive file systems with support for symbolic links, |
| 11 | if Git is configured globally to apply delay-capable clean/smudge |
| 12 | filters (such as Git LFS), Git could be fooled into running |
| 13 | remote code during a clone. |
| 14 | |
| 15 | Credit for finding and fixing this vulnerability goes to Matheus |
| 16 | Tavares, helped by Johannes Schindelin. |