[jgit-dev] git: malicious repositories can execute remote code while clo

[Denis Malyshkin <dmalyshkin@xxxxxxxxxx>]

Hello,

There is a vulnerability in git:
https://www.openwall.com/lists/oss-security/2021/03/09/3

"On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code during a clone."

Is this vulnerability may be used in JGit somehow?
Thank you.

--

Best regards, Denis Malyshkin, Senior C++ Developer ISS Art, LLC - custom software development company Skype: dmalyshkin Phone: +73812909808

IMPORTANT: The contents of this email and any attachments are confidential and intended for the named recipient(s) only. If you have received this email by mistake, please notify the sender immediately and delete it from your system. You may not copy this email or disclose its contents to anyone. Thank you.