{"id":105334,"date":"2022-10-19T15:37:13","date_gmt":"2022-10-19T13:37:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell"},"modified":"2022-10-19T15:37:13","modified_gmt":"2022-10-19T13:37:13","slug":"uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell","title":{"rendered":"Luki w Git, kt\u00f3re ujawniaj\u0105 si\u0119 podczas klonowania submodu\u0142\u00f3w oraz u\u017cywania pow\u0142oki git","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Opublikowano poprawki do rozproszonego systemu zarz\u0105dzania kodem \u017ar\u00f3d\u0142owym Git w wersjach 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3 i 2.37.4, w kt\u00f3rych usuni\u0119to dwie luki w zabezpieczeniach, ujawniaj\u0105ce si\u0119 przy u\u017cyciu polecenia &#171;git clone&#187; w trybie &#171;&#8212;recurse-submodules&#187; z niezweryfikowanymi repozytoriami oraz podczas korzystania z interaktywnego trybu pracy &#171;git shell&#187;. Monitorowanie wydania aktualizacji pakiet\u00f3w w dystrybucjach mo\u017cna \u015bledzi\u0107 na stronach Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD.      <\/p>\n<ul>\n<li class=\"l\"> CVE-2022-39253 &#8212; luka w zabezpieczeniach pozwala na to, aby atakuj\u0105cy, kontroluj\u0105cy zawarto\u015b\u0107 klonowanego repozytorium, uzyska\u0142 dost\u0119p do poufnych danych na systemie u\u017cytkownika poprzez umieszczenie w katalogu $GIT_DIR\/objects klonowanego repozytorium symbolicznych link\u00f3w do interesuj\u0105cych plik\u00f3w. Problem wyst\u0119puje tylko podczas lokalnego klonowania (w trybie &#171;&#8212;local&#187;, stosowanym, gdy \u017ar\u00f3d\u0142owe i docelowe dane do klonowania znajduj\u0105 si\u0119 na tej samej partycji) lub podczas klonowania z\u0142o\u015bliwego repozytorium zapakowanego w formie submodu\u0142u w innym repozytorium (na przyk\u0142ad przy rekursywnym w\u0142\u0105czeniu submodu\u0142\u00f3w poleceniem &#171;git clone &#8212;recurse-submodules&#187;).\n<p>Luka spowodowana jest tym, \u017ce w trybie klonowania &#171;&#8212;local&#187; git przemieszcza zawarto\u015b\u0107 $GIT_DIR\/objects do docelowego katalogu (tworzy twarde linki lub kopie plik\u00f3w), dokonuj\u0105c dereferencji symbolicznych link\u00f3w (tj. ostatecznie do docelowego katalogu kopiowane s\u0105 nie symbolic linki, ale bezpo\u015brednio pliki, do kt\u00f3rych prowadz\u0105 linki). Aby zablokowa\u0107 ujawnianie luki w nowych wydaniach git, zablokowano klonowanie repozytori\u00f3w w trybie &#171;&#8212;local&#187;, kt\u00f3re zawieraj\u0105 symboliczne linki w katalogu $GIT_DIR\/objects. Ponadto domy\u015blna warto\u015b\u0107 parametru protocol.file.allow zosta\u0142a zmieniona na &#171;user&#187;, co oznacza, \u017ce operacje klonowania z u\u017cyciem protoko\u0142u file:\/\/ s\u0105 uznawane za niebezpieczne.    <\/p>\n<li class=\"l\"> CVE-2022-39260 \u2014 przepe\u0142nienie ca\u0142kowitej liczby w funkcji split_cmdline(), u\u017cywanej w poleceniu \u201egit shell\u201d. Problem mo\u017ce by\u0107 wykorzystany do ataku na u\u017cytkownik\u00f3w, kt\u00f3rzy u\u017cywaj\u0105 \u201egit shell\u201d jako pow\u0142oki logowania i maj\u0105 w\u0142\u0105czony tryb interaktywny (utworzony plik $HOME\/git-shell-commands). Eksploatacja tej podatno\u015bci mo\u017ce prowadzi\u0107 do wykonania dowolnego kodu w systemie przy przesy\u0142aniu specjalnie sformatowanego polecenia, wi\u0119kszego ni\u017c 2 GB.    <\/ul>\n<p>\u0179r\u00f3d\u0142o: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57940\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3 \u0438 2.37.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b &#171;git clone&#187; \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 &#171;&#8212;recurse-submodules&#187; \u0441 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c\u0438 \u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u044b &#171;git shell&#187;. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 Debian, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105334","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3 \u0438 2.37.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Git, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u043f\u0440\u0438 \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0443\u0431\u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 git shell | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3 \u0438 2.37.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-10-19T13:37:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-10-19T13:37:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Podatno\u015bci w Git wyst\u0119puj\u0105ce podczas klonowania submodu\u0142\u00f3w i u\u017cywania pow\u0142oki git | ProHoster","description":"Wydano poprawki do rozproszonego systemu zarz\u0105dzania kodem \u017ar\u00f3d\u0142owym Git w wersjach 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3 i 2.37.4, w kt\u00f3rych usuni\u0119to dwie podatno\u015bci.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Git, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u043f\u0440\u0438 \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0443\u0431\u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 git shell | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3 \u0438 2.37.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimosti-v-git-proyavlyayushhiesya-pri-klonirovanii-submodulej-i-ispolzovanii-git-shell","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-19T13:37:13+00:00","article:modified_time":"2022-10-19T13:37:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/105334","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=105334"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/105334\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=105334"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=105334"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=105334"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}