Git fa'afouga fa'atasi ma se isi fa'afitauli fa'aletonu

Lolomiina faʻasaʻoga faʻasaʻo o le faʻasalalauga faʻapipiʻi faʻatonuga Git 2.26.2, 2.25.4, 2.24.3, 2.23.3, 2.22.4, 2.21.3, 2.20.4, 2.19.5, 2.18.4 ma 2.17.5, i totonu lea na aveesea vaivai (CVE-2020-11008), faamanatu faʻafitauli, fa'aumatia i le vaiaso talu ai. O le fa'aletonu fou e a'afia ai fo'i 'aufaigaluega "credential.helper" ma e fa'aogaina pe a pasi se URL fa'apitoa fa'atulagaina o lo'o iai se uiga fou, se tagata talimalo gaogao, po'o se polokalame talosaga e le'i fa'ailoaina. Pe a fa'agaioi sea URL, credential.helper e tu'uina atu fa'amatalaga e uiga i fa'amaoniga e le fetaui ma le fa'atonuga o lo'o talosagaina po'o le tagata talimalo o lo'o avanoa.

E le pei o le faʻafitauli muamua, pe a faʻaaogaina se faʻafitauli fou, e le mafai e le tagata osofaʻi ona pulea saʻo le talimalo lea o le a faʻafeiloaʻi ai faʻamaoniga a se isi tagata. O a fa'amaoniga e lia'i fa'alagolago ile fa'afefea ona fa'aogaina le fa'ailoga "host" o lo'o misi ile credential.helper. O le autu o le faʻafitauli o le avanoa avanoa i le URL o loʻo faʻamatalaina e le tele o credential.helper handlers e fai ma faʻatonuga e faʻaoga soʻo se faʻamaoniga i le talosaga o loʻo iai nei. O le mea lea, credential.helper e mafai ona auina atu faʻamatalaga na teuina mo se isi server i le server a le tagata osofaʻi o loʻo faʻamaonia i le URL.

O le faʻafitauli e tupu pe a faʻatino galuega e pei o le "git clone" ma le "git fetch", ae sili ona matautia pe a faʻagasolo submodules - pe a faʻatinoina le "git submodule update", o URL o loʻo faʻamaonia i le faila .gitmodules mai le fale teu oloa e otometi lava ona faʻatautaia. E fai ma fofo e poloka ai le faafitauli fautuaina Aua ne'i fa'aogaina credential.helper pe a o'o atu i faleteuoloa lautele ma aua le fa'aogaina le "git clone" i le "--recurse-submodules" fa'atasi ma fale e le'i siakiina.

O lo'o ofoina atu i fa'asalalauga fou a Git faasaʻoga taofia le vala'au credential.fesoasoani mo URL o iai tulaga taua e le mafai ona faamatalaina (mo se faʻataʻitaʻiga, pe a faʻamaoti mai ni faʻailoga se tolu nai lo le lua - "http:///host" poʻo le leai o se faʻataʻitaʻiga - "http::ftp.example.com/"). O le fa'afitauli e a'afia ai le faleoloa (fa'apipi'i i totonu o le Git fa'amaumauga fa'amaonia), fa'aoga (fa'apipi'i totonu o fa'amaumauga o lo'o ulufale i totonu), ma le osxkeychain (macOS storage) fa'atonu. E le afaina le Git Credential Manager (Windows repository).

E mafai ona e siaki le tatalaina o faʻafouga o afifi i faʻasalalauga i luga o itulau Debian, Ubuntu, RHEL, SUSE/openSUSE, Fedora, faitotoa faaofuofu, ALT, FreeBSD.

puna: opennet.ru