{"id":108095,"date":"2023-04-26T12:48:19","date_gmt":"2023-04-26T10:48:19","guid":{"rendered":"https:\/\/prohoster.info\/?p=108095"},"modified":"2023-04-27T10:34:32","modified_gmt":"2023-04-27T08:34:32","slug":"uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","title":{"rendered":"Zranitelnosti v Gitu, kter\u00e9 umo\u017e\u0148uj\u00ed p\u0159episovat soubory nebo vykon\u00e1vat sv\u016fj k\u00f3d","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byly zve\u0159ejn\u011bny opravy verze distribuovan\u00e9ho syst\u00e9mu \u0159\u00edzen\u00ed verz\u00ed Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 a 2.30.9, kter\u00e9 \u0159e\u0161\u00ed p\u011bt zranitelnost\u00ed. Sledovat vyd\u00e1n\u00ed aktualizac\u00ed bal\u00edk\u016f v distribuc\u00edch lze na str\u00e1nk\u00e1ch Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch a FreeBSD. Jako obranou proti zranitelnostem se doporu\u010duje vyvarovat se vykon\u00e1v\u00e1n\u00ed p\u0159\u00edkazu \u201egit apply \u2014reject\u201c p\u0159i pr\u00e1ci s neov\u011b\u0159en\u00fdmi extern\u00edmi patchi a zkontrolovat obsah $GIT_DIR\/config p\u0159ed spu\u0161t\u011bn\u00edm p\u0159\u00edkaz\u016f \u201egit submodule deinit\u201c, \u201egit config \u2014rename-section\u201c a \u201egit config \u2014remove-section\u201c p\u0159i pr\u00e1ci s ned\u016fv\u011bryhodn\u00fdmi repozit\u00e1\u0159i. <\/p>\n

Zranitelnost CVE-2023-29007 umo\u017e\u0148uje zam\u011b\u0148ov\u00e1n\u00ed nastaven\u00ed v konfigura\u010dn\u00edm souboru $GIT_DIR\/config, kter\u00e1 mohou b\u00fdt pou\u017eita k vykon\u00e1n\u00ed k\u00f3du v syst\u00e9mu prost\u0159ednictv\u00edm uveden\u00ed cest k vykonateln\u00fdm soubor\u016fm v direktiv\u00e1ch core.pager, core.editor a core.sshCommand. Zranitelnost je zp\u016fsobena logickou chybou, kv\u016fli kter\u00e9 mohou b\u00fdt velmi dlouh\u00e9 hodnoty konfigurace zpracov\u00e1ny jako za\u010d\u00e1tek nov\u00e9 sekce p\u0159i prov\u00e1d\u011bn\u00ed operac\u00ed p\u0159ejmenov\u00e1n\u00ed nebo odstra\u0148ov\u00e1n\u00ed sekce z konfigura\u010dn\u00edho souboru. V praxi lze k zam\u011b\u0148ov\u00e1n\u00ed hodnot vyu\u017e\u00edvaj\u00edc\u00edch zranitelnost dos\u00e1hnout uveden\u00edm velmi dlouh\u00fdch URL submodul\u016f, kter\u00e9 jsou ulo\u017eeny do souboru $GIT_DIR\/config b\u011bhem inicializace. Tato URL mohou b\u00fdt interpretov\u00e1na jako nov\u00e1 nastaven\u00ed p\u0159i pokusu o jejich odstran\u011bn\u00ed pomoc\u00ed \u201egit submodule deinit\u201c. <\/p>\n

Zranitelnost CVE-2023-25652 umo\u017e\u0148uje p\u0159epsat obsah soubor\u016f mimo pracovn\u00ed strom p\u0159i zpracov\u00e1n\u00ed speci\u00e1ln\u011b strukturovan\u00fdch patch\u016f p\u0159\u00edkazem «git apply —reject». P\u0159i pokusu o proveden\u00ed p\u0159\u00edkazu «git apply» s malwarov\u00fdm patchem, kter\u00fd se pokou\u0161\u00ed zapsat do souboru pomoc\u00ed symbolick\u00e9ho odkazu, bude operace zam\u00edtnuta. V Git 2.39.1 byla ochrana proti manipulac\u00edm prost\u0159ednictv\u00edm symbolick\u00fdch odkaz\u016f dopln\u011bna o blokaci patch\u016f, kter\u00e9 vytv\u00e1\u0159ej\u00ed symbolick\u00e9 odkazy a pokou\u0161ej\u00ed se p\u0159es n\u011b prov\u00e9st z\u00e1pis. Podstata zmi\u0148ovan\u00e9 zranitelnosti spo\u010d\u00edv\u00e1 v tom, \u017ee Git nezohled\u0148oval, \u017ee u\u017eivatel m\u016f\u017ee prov\u00e9st p\u0159\u00edkaz «git apply —reject» k z\u00e1pisu odm\u00edtnut\u00fdch \u010d\u00e1st\u00ed patchu jako soubory s p\u0159\u00edponou «.rej», co\u017e \u00fato\u010dn\u00edkovi umo\u017e\u0148uje vyu\u017e\u00edt tuto mo\u017enost k z\u00e1pisu obsahu do libovoln\u00e9ho adres\u00e1\u0159e, pokud to umo\u017e\u0148uj\u00ed aktu\u00e1ln\u00ed opr\u00e1vn\u011bn\u00ed. <\/p>\n

Krom\u011b toho byly odstran\u011bny t\u0159i zranitelnosti, kter\u00e9 se projevuj\u00ed pouze na platform\u011b Windows: CVE-2023-29012 (vyhled\u00e1v\u00e1n\u00ed spustiteln\u00e9ho souboru doskey.exe v pracovn\u00edm adres\u00e1\u0159i repozit\u00e1\u0159e p\u0159i prov\u00e1d\u011bn\u00ed p\u0159\u00edkazu «Git CMD», co\u017e umo\u017e\u0148uje prov\u00e1d\u011bt vlastn\u00ed k\u00f3d v syst\u00e9mu u\u017eivatele), CVE-2023-25815 (p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku p\u0159i zpracov\u00e1n\u00ed speci\u00e1ln\u011b strukturovan\u00fdch soubor\u016f lokalizace v gettext) a CVE-2023-29011 (mo\u017enost podvr\u017een\u00ed souboru connect.exe p\u0159i pr\u00e1ci p\u0159es SOCKS5).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u0438 2.30.9, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108095","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnosti v Gitu, kter\u00e9 umo\u017e\u0148uj\u00ed p\u0159epsat soubory nebo spustit vlastn\u00ed k\u00f3d | ProHoster","description":"Byly vyd\u00e1ny opravy distribuce syst\u00e9mu spr\u00e1vy zdrojov\u00fdch k\u00f3d\u016f Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 a 2.30.9, ve kter\u00fdch bylo odstran\u011bno p\u011bt zranitelnost\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u0438 2.30.9, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-26T10:48:19+00:00","article:modified_time":"2023-04-27T08:34:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/108095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=108095"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/108095\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=108095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=108095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=108095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}