Debian LTS Git LFS Fix for Malicious Repository Attacks

It was discovered that Git LFS, a Git extension for versioning large files, incorrectly handled symbolic links. An attacker, through a malicious Git repository, could write files outside of the victim’s working tree or bare repository, leading to remote command execution. For Debian 12 bookworm, this problem has been fixed in versionLinuxSecurity – Security AdvisoriesRead More