mirror of
https://github.com/godotengine/buildroot.git
synced 2026-01-05 14:09:53 +03:00
Fix CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code during a clone. For details see [1] and [2]. [1] http://lkml.iu.edu/hypermail/linux/kernel/2102.1/01858.html [2] http://lkml.iu.edu/hypermail/linux/kernel/2103.1/02533.html Signed-off-by: Peter Seiderer <ps.report@gmx.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>