High USN-4761-1 1 CVE

git vulnerability

Published Mar 9, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Matheus Tavares discovered that Git incorrectly handled delay-capable
clean/smudge filters when being used on case-insensitive filesystems. A
remote attacker could possibly use this issue to execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	git	1:2.7.4-0ubuntu1.10
Ubuntu · 18.04 LTS 18.04:LTS	git	1:2.17.1-1ubuntu0.8
Ubuntu · 20.04 LTS 20.04:LTS	git	1:2.25.1-1ubuntu3.1

Vulnerabilities 1

High 8.0

CVE-2021-21300 Public exploit EPSS 89%

malicious repositories can execute remote code while cloning

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed w…

git git git git Debian Ubuntu Alpine

Mar 9, 2021

References

report
https://ubuntu.com/security/CVE-2021-21300