tree 72737d582c2371a1b440bb630502398005eddb40
parent 2c9a4c731010685b86559c06637aeef2ac5ea06e
parent fade728df1221598f42d391cf377e9e84a32053f
author Junio C Hamano <gitster@pobox.com> 1675465047 -0800
committer Johannes Schindelin <johannes.schindelin@gmx.de> 1675671136 +0100

Merge branch 'ps/apply-beyond-symlink' into maint-2.30

Fix a vulnerability (CVE-2023-23946) that allows crafted input to trick
`git apply` into writing files outside of the working tree.

* ps/apply-beyond-symlink:
  dir-iterator: prevent top-level symlinks without FOLLOW_SYMLINKS

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>