Git 2.17.6
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
Johannes Schindelin committed
Jan 29, 2021 at 19:13 UTC
6b82d3eea625d83af067dc0ed57e361711cfb8b7
3 files changed
+18
-2
Documentation/RelNotes/2.17.6.txt
new
+16
@@ -0,0 +1,16 @@
1
+Git v2.17.6 Release Notes
2
+=========================
3
+
4
+This release addresses the security issues CVE-2021-21300.
5
+
6
+Fixes since v2.17.5
7
+-------------------
8
+
9
+ * CVE-2021-21300:
10
+ On case-insensitive file systems with support for symbolic links,
11
+ if Git is configured globally to apply delay-capable clean/smudge
12
+ filters (such as Git LFS), Git could be fooled into running
13
+ remote code during a clone.
14
+
15
+Credit for finding and fixing this vulnerability goes to Matheus
16
+Tavares, helped by Johannes Schindelin.
GIT-VERSION-GEN
+1
-1
@@ -1,7 +1,7 @@
1
#!/bin/sh
2
3
GVF=GIT-VERSION-FILE
4
-DEF_VER=v2.17.5
4
+DEF_VER=v2.17.6
5
6
LF='
7
'
RelNotes
+1
-1
@@ -1 +1 @@
1
-Documentation/RelNotes/2.17.5.txt
\ No newline at end of file
1
+Documentation/RelNotes/2.17.6.txt
\ No newline at end of file