Sabuntawar Git tare da ƙayyadaddun lahani guda 8

Buga gyare-gyare na tsarin sarrafa tushen rarraba Git 2.24.1, 2.23.1, 2.22.2, 2.21.1, 2.20.2, 2.19.3, 2.18.2, 2.17.3, 2.16.6, 2.15.4 da 2.14.62.24.1 XNUMX, wanda ya gyara raunin da ya ba maharin damar sake rubuta hanyoyin sabani a cikin tsarin fayil, tsara aiwatar da lambar nesa, ko sake rubuta fayiloli a cikin directory ".git/". Yawancin matsalolin da ma'aikata suka gano
Cibiyar Amsar Tsaro ta Microsoft, biyar daga cikin lahani takwas sun keɓance ga dandalin Windows.

  • CVE-2019-1348 - umarnin yawo "fasali fitarwa-alamomi = hanya"Yana da damar rubuta lakabi zuwa kundin adireshi na sabani, waɗanda za a iya amfani da su don sake rubuta tafarki na sabani a cikin tsarin fayil lokacin yin aikin "git fast-import" tare da bayanan shigar da ba a bincika ba.
  • CVE-2019-1350 - kuskuren kubuta daga muhawarar layin umarni zai iya jagoranci don aiwatar da nisa na lambar mai kai hari yayin cloning recursive ta amfani da ssh: // URL. Musamman, guje wa gardama da ke ƙarewa a cikin koma baya (misali, “gwajin \”) an gudanar da shi ba daidai ba. A wannan yanayin, lokacin da ake yin gardama tare da ƙididdiga biyu, ƙididdiga ta ƙarshe ta tsere, wanda ya ba da damar tsara sauya zaɓuɓɓukan ku akan layin umarni.
  • CVE-2019-1349 - lokacin da ake yin cloning submodules ("clone-recurse-submodules") a cikin yanayin Windows a ƙarƙashin wasu yanayi. zai iya zama haifar da amfani da wannan git directory sau biyu (.git, git ~ 1, git ~ 2 da git ~ N ana gane su azaman jagora ɗaya a cikin NTFS, amma an gwada wannan yanayin don git ~ 1 kawai), wanda za'a iya amfani dashi don tsarawa. rubuta zuwa ga directory ".git". Don tsara yadda za a aiwatar da lambar sa, mai hari, alal misali, na iya musanya rubutunsa ta wurin mai sarrafa bayanan bayan-bayan nan a cikin fayil ɗin .git/config.
  • CVE-2019-1351 - mai kula da sunaye na tuƙi a cikin hanyoyin Windows lokacin fassara hanyoyi kamar "C: \" an tsara su ne kawai don maye gurbin masu gano Latin haruffa guda ɗaya, amma bai yi la'akari da yuwuwar ƙirƙirar fayafai masu kama-da-wane da aka sanya ta hanyar "subst letter: path" . Irin waɗannan hanyoyin ba a bi da su a matsayin cikakke ba, amma a matsayin hanyoyin dangi, wanda ya sa ya yiwu, lokacin da aka rufe ma'ajiyar ƙeta, don tsara rikodin a cikin kundin adireshi a wajen bishiyar directory ɗin aiki (misali, lokacin amfani da lambobi ko haruffa unicode a cikin faifai). suna - "1: \mene \ hex.txt" ko "ä:\tschibät.sch").
  • CVE-2019-1352 - lokacin aiki akan dandamali na Windows, amfani da madadin rafukan bayanai a cikin NTFS, wanda aka ƙirƙira ta ƙara sifa ": rafi-name: nau'in rafi" zuwa sunan fayil, yarda sake rubuta fayiloli a cikin directory ".git/" lokacin da ake rufe ma'ajiya mara kyau. Misali, sunan ".git::$INDEX_ALLOCATION" a cikin NTFS ana kula da shi azaman ingantacciyar hanyar haɗi zuwa kundin adireshin ".git".
  • CVE-2019-1353 - lokacin amfani da Git a cikin yanayin WSL (Windows Subsystem don Linux) lokacin samun damar jagorar aiki ba a amfani kariya daga magudin suna a cikin NTFS (hare-hare ta hanyar fassarar sunan FAT ya yiwu, alal misali, ".git" za a iya isa ga ta hanyar "git~1" directory).
  • CVE-2019-1354 -
    damar ya rubuta zuwa ga directory na ".git/" akan dandamalin Windows lokacin da aka rufe ma'ajin ma'auni masu ƙunshe da fayiloli tare da ja da baya a cikin sunan (misali, "a\b"), wanda aka yarda da shi akan Unix/Linux, amma an karɓa azaman ɓangare na hanyar a kan Windows.

  • CVE-2019-1387 - Ana iya amfani da rashin isassun sunaye na submodule don tsara hare-haren da aka yi niyya, wanda, idan an sake maimaita su akai-akai, na iya yuwuwa. zai iya jagoranci don aiwatar da lambar maharin. Git bai hana ƙirƙirar kundin kundin tsarin mulki ba a cikin wani kundin tsarin mulki, wanda a mafi yawan lokuta zai haifar da rudani kawai, amma bai yi yuwuwar hana abin da ke cikin wani tsarin sake rubutawa ba yayin aiwatar da tsarin cloning na maimaitawa (misali, kundayen adireshi na submodule. "hippo" da "hippo/ƙugiya" an sanya su a matsayin ".git/modules/hippo/" da ".git/modules/hippo/ƙugiya/", kuma ana iya amfani da littafin adireshi na hooks a cikin hippo daban don ɗaukar ƙugiya masu jawo.

An shawarci masu amfani da Windows da su sabunta sigar Git ɗin su nan da nan, kuma su guji rufe wuraren da ba a tantance ba har sai an sabunta su. Idan har yanzu bai yiwu a sabunta sigar Git cikin gaggawa ba, to don rage haɗarin harin, ana ba da shawarar kar a gudanar da “git clone — recurse-submodules” da “git submodule update” tare da wuraren ajiyar da ba a bincika ba, kar a yi amfani da “git” shigo da sauri” tare da rafukan shigar da ba a bincika ba, kuma ba don haɗa ma'ajiyar ma'ajin zuwa ɓangarorin tushen NTFS ba.

Don ƙarin tsaro, sabbin fitowar kuma sun hana yin amfani da ginin hanyar "submodule.{name}.update=!umurni" a cikin .gitmodules. Don rarrabawa, zaku iya bin diddigin sakin sabuntawar fakiti akan shafuka Debian,Ubuntu, RHEL, SUSE/budeSUSE, Fedora, Arch, Alt, FreeBSD.

source: budenet.ru

Add a comment