Description
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Corporation Git
Before 2.24.1, 2.23.1, 2.22.2, 2.21.1, 2.20.2, 2.19.3, 2.18.2, 2.17.3, 2.16.6, 2.15.4, 2.14.6affected
References
- https://support.apple.com/kb/HT210729 ↗
- https://lore.kernel.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/T/#u ↗
- https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html ↗
- https://access.redhat.com/errata/RHSA-2020:0228 ↗
- https://security.gentoo.org/glsa/202003-30 ↗
- https://security.gentoo.org/glsa/202003-42 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html ↗