{"id":108095,"date":"2023-04-26T12:48:19","date_gmt":"2023-04-26T10:48:19","guid":{"rendered":"https:\/\/prohoster.info\/?p=108095"},"modified":"2023-04-27T10:34:32","modified_gmt":"2023-04-27T08:34:32","slug":"uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","title":{"rendered":"Git sebezhet\u0151s\u00e9gek, amelyek lehet\u0151v\u00e9 teszik f\u00e1jlok fel\u00fcl\u00edr\u00e1s\u00e1t vagy saj\u00e1t k\u00f3d v\u00e9grehajt\u00e1s\u00e1t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Megjelentek a Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u00e9s 2.30.9 verzi\u00f3i, amelyekben \u00f6t sebezhet\u0151s\u00e9get jav\u00edtottak ki. A csomagfriss\u00edt\u00e9sek nyomon k\u00f6vet\u00e9s\u00e9re a Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch \u00e9s FreeBSD disztrib\u00faci\u00f3k oldalain lehet r\u00e1keresni. A sebezhet\u0151s\u00e9gek elleni v\u00e9delem \u00e9rdek\u00e9ben aj\u00e1nlott elker\u00fclni a \u201egit apply \u2014reject\u201d parancs futtat\u00e1s\u00e1t megb\u00edzhatatlan k\u00fcls\u0151 jav\u00edt\u00e1sokkal val\u00f3 munka sor\u00e1n, \u00e9s ellen\u0151rizni a $GIT_DIR\/config tartalm\u00e1t a \u201egit submodule deinit\u201d, \u201egit config \u2014rename-section\u201d \u00e9s \u201egit config \u2014remove-section\u201d parancsok futtat\u00e1sa el\u0151tt, ha nem megb\u00edzhat\u00f3 t\u00e1rol\u00f3kkal dolgozunk. <\/p>\n
A CVE-2023-29007 sebezhet\u0151s\u00e9g lehet\u0151v\u00e9 teszi, hogy konfigur\u00e1ci\u00f3s be\u00e1ll\u00edt\u00e1sok ker\u00fcljenek besz\u00far\u00e1sra a $GIT_DIR\/config f\u00e1jlba, amelyek a rendszerben k\u00f3d v\u00e9grehajt\u00e1s\u00e1ra haszn\u00e1lhat\u00f3k az core.pager, core.editor \u00e9s core.sshCommand direkt\u00edv\u00e1kban megadott v\u00e9grehajt\u00e1si f\u00e1jlok \u00fatvonalainak megad\u00e1s\u00e1val. A sebezhet\u0151s\u00e9get egy logikai hiba okozza, amely miatt a t\u00fal hossz\u00fa konfigur\u00e1ci\u00f3s \u00e9rt\u00e9kek \u00faj szakasz kezdetek\u00e9nt ker\u00fclhetnek feldolgoz\u00e1sra a szekci\u00f3k \u00e1tnevez\u00e9s\u00e9re vagy elt\u00e1vol\u00edt\u00e1s\u00e1ra ir\u00e1nyul\u00f3 m\u0171veletek v\u00e9grehajt\u00e1sa sor\u00e1n. Gyakorlatban a sebezhet\u0151s\u00e9get kihaszn\u00e1l\u00f3 \u00e9rt\u00e9kek \u00e1tkonfigur\u00e1l\u00e1s\u00e1hoz nagyon hossz\u00fa almodul URL-ek megad\u00e1s\u00e1val juthatunk el, amelyek a $GIT_DIR\/config f\u00e1jlba ker\u00fclnek a inicializ\u00e1ci\u00f3 sor\u00e1n. Ezek az URL-ek \u00faj be\u00e1ll\u00edt\u00e1sokk\u00e9nt \u00e9rtelmezhet\u0151k, ha megpr\u00f3b\u00e1ljuk \u0151ket elt\u00e1vol\u00edtani a \u201egit submodule deinit\u201d paranccsal. <\/p>\n
A CVE-2023-25652 vulnerability allows the content of files outside the working tree to be overwritten when processed by the command «git apply —reject» with specially crafted patches. When attempting to execute a malicious patch via the «git apply» command that tries to write to a file through a symbolic link, the operation will be rejected. In Git 2.39.1, the protection against manipulation through symbolic links has been enhanced by blocking patches that create symbolic links and attempt to perform writes through them. The essence of the vulnerability under consideration is that Git did not consider that a user could execute the command «git apply —reject» to write the rejected parts of the patch as files with the «.rej» extension, and an attacker could exploit this opportunity to write data to an arbitrary directory, depending on the current permissions. <\/p>\n
In addition, three vulnerabilities have been fixed that only manifest on the Windows platform: CVE-2023-29012 (searching for the executable doskey.exe in the working directory of the repository when executing the «Git CMD» command, which allows for the execution of their own code in the user's system), CVE-2023-25815 (buffer overflow when processing specially crafted localization files in gettext), and CVE-2023-29011 (the ability to substitute the connect.exe file when working through SOCKS5). \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"