Mmelite Git nwere adịghị ike ọzọ edoziri

Ebipụtara Mwepụta mmezi nke sistemụ njikwa isi iyi ekesa Git 2.26.2, 2.25.4, 2.24.3, 2.23.3, 2.22.4, 2.21.3, 2.20.4, 2.19.5, 2.18.4 na 2.17.5, n'ime nke kpochapụrụ adịghị ike (CVE-2020-11008), na-echetara ya nsogbu ahụ, kpochapụrụ n'izu gara aga. Ọhụhụ adịghị ike ọhụrụ ahụ na-emetụtakwa ndị na-ahụ maka "credential.helper" ma na-erigbu ya mgbe ị na-agafe URL ahaziri ahazi nke nwere agwa ahịrị ọhụrụ, onye nnabata efu, ma ọ bụ atụmatụ arịrịọ akọwapụtaghị. Mgbe ị na-ahazi URL dị otú ahụ, credential.helper na-eziga ozi gbasara nzere na-adabaghị na usoro achọrọ ma ọ bụ onye nnabata a na-enweta.

N'adịghị ka nsogbu gara aga, mgbe ọ na-erigbu adịghị ike ọhụrụ, onye mwakpo ahụ enweghị ike ịchịkwa onye ọbịa nke a ga-ebufe nzere onye ọzọ ozugbo. Ihe nzere na-agbapụta na-adabere n'otú e si edozi paramita "onye ọbịa" na-efu na credential.helper. Isi nsogbu bụ na ọtụtụ ndị na-ahụ maka credential.helper na-akọwapụta oghere efu na URL dị ka ntụziaka iji tinye nzere ọ bụla na arịrịọ ugbu a. Ya mere, credential.helper nwere ike izipu nzere echekwara maka ihe nkesa ọzọ na ihe nkesa onye mwakpo ahụ akọwapụtara na URL.

Nsogbu a na-eme mgbe a na-arụ ọrụ dịka "git clone" na "git fetch", mana ọ kacha dị ize ndụ mgbe a na-edozi submodules - mgbe ị na-eme "git submodule update", URL ndị akọwapụtara na faịlụ .gitmodules sitere na ebe nchekwa na-akpaghị aka. Dị ka ihe ngwọta iji gbochie nsogbu ahụ ka akwadoro Ejila credential.helper mgbe ị na-abanye ebe nchekwa ọha ma ejikwala "git clone" na ọnọdụ "--recurse-submodules" yana ebe nchekwa anaghị enyocha ya.

Ewepụtara na mwepụta Git ọhụrụ mgbazi na-egbochi ịkpọ credential.helper maka URL nwere ụkpụrụ na-enweghị atụ (dịka ọmụmaatụ, mgbe ịkọwapụta slashes atọ kama ịbụ abụọ - "http:///host" ma ọ bụ na-enweghị atụmatụ protocol - "http :: ftp.example.com/"). Okwu a na-emetụta ụlọ ahịa ahụ (nchekwa nzere Git arụnyere n'ime ya), cache (nchekwa nke etinyere n'ime ya), yana ndị na-ahụ maka osxkeychain (nchekwa macOS). Onye njikwa nzere Git (Windows repository) adịghị emetụta ya.

Ị nwere ike soro mwepụta nke mmelite ngwugwu na nkesa na ibe Debian, Ubuntu, RHEL, SUSE/mepeeSUSE, Fedora, Arch, ALT, FreeBSD.

isi: opennet.ru

Tinye a comment