Kusintha kwa Git ndi chiopsezo china chokhazikika

Lofalitsidwa kutulutsidwa kwadongosolo logawira gwero la Git 2.26.2, 2.25.4, 2.24.3, 2.23.3, 2.22.4, 2.21.3, 2.20.4, 2.19.5, 2.18.4 ndi 2.17.5, mkati amene anathetsa kusatetezeka (CVE-2020-11008), kukumbukira vuto, inathetsedwa sabata yatha. Chiwopsezo chatsopanochi chimakhudzanso ogwiritsira ntchito "credential.helper" ndipo amagwiritsidwa ntchito podutsa ulalo wopangidwa mwapadera wokhala ndi zilembo zatsopano, wolandira wopanda kanthu, kapena chisakanizo chosadziwika. Ikakonza ulalo woterewu, credential.helper imatumiza zambiri zokhudzana ndi zomwe sizikugwirizana ndi protocol yomwe yapemphedwa kapena wolandila omwe afikiridwa.

Mosiyana ndi vuto lapitalo, pogwiritsira ntchito chiwopsezo chatsopano, wowukirayo sangathe kuwongolera mwachindunji wolandirayo pomwe zidziwitso za munthu wina zidzasamutsidwa. Zomwe zidziwitso zimatsitsidwa zimatengera momwe gawo la "host" lomwe likusowa limagwiridwa mu credential.helper. Chomwe chimayambitsa vutoli ndi chakuti minda yopanda kanthu mu URL imatanthauzidwa ndi credential.helper handlers ambiri monga malangizo ogwiritsira ntchito zizindikiro zilizonse pa pempho lamakono. Chifukwa chake, credential.helper imatha kutumiza zidziwitso zosungidwa kwa seva ina ku seva ya wowukira yomwe yafotokozedwa mu URL.

Vuto limachitika pochita zinthu monga "git clone" ndi "git fetch", koma ndizowopsa kwambiri pokonza ma submodules - pochita "git submodule update", ma URL omwe afotokozedwa mu fayilo ya .gitmodules kuchokera kunkhokwe amasinthidwa zokha. Monga njira yothetsera vutoli analimbikitsa Osagwiritsa ntchito credential.helper mukalowa m'malo osungira anthu ndipo musagwiritse ntchito "git clone" munjira ya "-recurse-submodules" yokhala ndi nkhokwe zosasankhidwa.

Zaperekedwa muzotulutsa zatsopano za Git kukonza imaletsa kuyimba credential.helper pama URL omwe ali makhalidwe osayimira (mwachitsanzo, potchula zikwatu zitatu m'malo mwa ziwiri - "http:///host" kapena popanda protocol scheme - "http::ftp.example.com/"). Nkhaniyi ikukhudza sitolo (yosungiramo mbiri ya Git), cache (chosungiramo chosungiramo zidziwitso zolowetsedwa), ndi osxkeychain (macOS yosungirako). Wothandizira wa Git Credential (Windows repository) samakhudzidwa.

Mutha kutsata kutulutsidwa kwa zosintha zamaphukusi pamagawidwe patsamba Debian, Ubuntu, RHEL, SUSE/OpenSUSE, Fedora, Chipilala, ALT, FreeBSD.

Source: opennet.ru