Local clones may end up hardlinking files into the target repository's object database when source and target repository reside on the same disk. If the source repository is owned by a different user, then those hardlinked files may be rewritten at any point in time by the untrusted user.
Created git tracking bugs for this issue: Affects: fedora-all [bug 2280470] Created rubygem-dynect_rest tracking bugs for this issue: Affects: epel-all [bug 2280467] Created rubygem-rouge tracking bugs for this issue: Affects: fedora-all [bug 2280468] Created rubygem-stringex tracking bugs for this issue: Affects: fedora-all [bug 2280471] Created swiftlint tracking bugs for this issue: Affects: fedora-all [bug 2280469]
Created git tracking bugs for this issue: Affects: fedora-all [bug 2280476] Created rubygem-dynect_rest tracking bugs for this issue: Affects: epel-all [bug 2280473] Created rubygem-rouge tracking bugs for this issue: Affects: fedora-all [bug 2280474] Created rubygem-stringex tracking bugs for this issue: Affects: fedora-all [bug 2280477] Created swiftlint tracking bugs for this issue: Affects: fedora-all [bug 2280475]
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:4084 https://access.redhat.com/errata/RHSA-2024:4084
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:4083 https://access.redhat.com/errata/RHSA-2024:4083
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:4368 https://access.redhat.com/errata/RHSA-2024:4368