CI Report:
https://ci-tests.linuxserver.io/linuxserver/tautulli/develop-d663368f-ls9/index.html
LinuxServer Changes:
Full Changelog: develop-30f7c4f4-ls8...develop-d663368f-ls9
Remote Changes:
Fix GIT_PATH command injection
Fix an authenticated remote command execution issue by keeping GIT_PATH as a literal executable argument instead of concatenating and reparsing it with Git arguments.
This prevents malicious quoted shell syntax in GIT_PATH from becoming additional executable arguments.
Also adds a regression test verifying that an injection-like GIT_PATH is passed as a single argv element and that shell execution is not enabled.