CVE-2023-23946

A vulnerability was found in Git. This security issue occurs when feeding a crafted input to “git apply.” A path outside the working tree can be overwritten by the user running “git apply.”

Mitigation

Use git apply --stat to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.