Litokollo tse lokisoang tsa sistimi e ajoang ea taolo ea mohloli Git 2.30.2, 2.17.6, 2.18.5, 2.19.6, 2.20.5, 2.21.4, 2.22.5, 2.23.4, 2.24.4, 2.25.5, 2.26.3. li phatlalalitsoe .2.27.1, 2.28.1, 2.29.3 le 2021, tse lokisitseng ts'oaetso (CVE-21300-2.15) e lumellang ts'ebetso ea khoutu e hole ha u kopanya polokelo ea mohlaseli ho sebelisa taelo ea "git clone". Litokollo tsohle tsa Git ho tloha ha mofuta oa XNUMX lia ameha.
Bothata bo etsahala ha ho sebelisoa ts'ebetso ea ho tsoa ka morao, e sebelisoang litsing tse ling tsa ho hloekisa, joalo ka tse hlophisitsoeng ho Git LFS. Ho ba kotsing ho ka sebelisoa feela lits'ebetsong tsa faele tse sa tsotelleng tse tšehetsang likhokahano tsa tšoantšetso, joalo ka NTFS, HFS+ le APFS (ke hore, ho li-platform tsa Windows le macOS).
Joalo ka ts'ireletso ea ts'ireletso, o ka tima ts'ebetso ea symlink ho git ka ho sebelisa "git config -global core.symlinks false", kapa tima ts'ehetso ea sefahla sa ts'ebetso u sebelisa taelo ea "git config -show-scope -get-regexp 'filter\.. * \.sebedisa'". E boetse e kgothaletswa ho qoba cloning bobolokelo unverified.
Source: opennet.ru