Uhlaziyo lweGit kunye nobunye ubuthathaka obulungisiweyo

Ipapashiwe ukukhutshwa kokulungiswa kwenkqubo yokulawula umthombo osasaziweyo weGit 2.26.2, 2.25.4, 2.24.3, 2.23.3, 2.22.4, 2.21.3, 2.20.4, 2.19.5, 2.18.4 kunye ne-2.17.5, kwi eyaphelisa ukuba sesichengeni (I-CVE-2020-11008), isikhumbuzo ingxaki, ipheliswe kwiveki ephelileyo. Ubuthathaka obutsha bukwachaphazela abaphathi be-"credential.helper" kwaye isetyenziswa xa kugqithiswa i-URL efomathwe ngokukodwa equlethe unobumba omtsha, umamkeli ongenanto, okanye inkqubo yesicelo engachazwanga. Xa kusetyenzwa i-URL enjalo, credential.helper ithumela ulwazi malunga nenkcazi engahambelani neprothokholi eceliweyo okanye umamkeli ofikelelwayo.

Ngokungafaniyo nengxaki yangaphambili, xa usebenzisa ubuthathaka obutsha, umhlaseli akakwazi ukulawula ngokuthe ngqo umamkeli apho iziqinisekiso zomnye umntu ziya kudluliselwa khona. Zeziphi iziqinisekiso ezivuzayo zixhomekeke kwindlela iparamitha “yomkhosi” elahlekileyo ephathwa ngayo kwi-credential.helper. Undoqo wengxaki kukuba imihlaba engenanto kwi-URL itolikwa ngabaphathi abaninzi be-credential.helper njengemiyalelo yokusebenzisa naziphi iziqinisekiso kwisicelo sangoku. Ngaloo ndlela, i-credential.helper inokuthumela iziqinisekiso ezigcinwe kwenye iseva kumncedisi womhlaseli ochazwe kwi-URL.

Ingxaki yenzeka xa kusenziwa imisebenzi efana ne "git clone" kunye ne "git fetch", kodwa iyingozi kakhulu xa kusetyenzwa i-submodules - xa usenza "git submodule update", ii-URL ezichazwe kwifayile ye-.gitmodules ziqhutyelwa ngokuzenzekelayo. Njengendlela yokusombulula ingxaki icetyisiwe Musa ukusebenzisa i-credential.helper xa ufikelela kwiindawo zokugcina zikawonke-wonke kwaye ungasebenzisi "git clone" kwimo "--recurse-submodules" eneendawo zokugcina ezingakhangelwanga.

Inikezelwe kukhupho olutsha lweGit ukulungiswa inqanda ukufowunela credential.helper kwiiURL eziqulathe amaxabiso angamelwanga (umzekelo, xa uchaza izisilayi ezintathu endaweni yezimbini - “http:///host” okanye ngaphandle kwenkqubo yeprotocol - “http::ftp.example.com/”). Umba uchaphazela ivenkile (eyakhelwe kwi-Git yogcino lwesiqinisekiso), i-cache (i-cache eyakhelwe-ngaphakathi yeziqinisekiso ezifakiwe), kunye ne-osxkeychain (i-macOS yokugcina) abaphathi. Umphathi weGit Credential (iWindows repository) ayichaphazelekanga.

Unokulandelela ukukhutshwa kohlaziyo lwephakheji kunikezelo kumaphepha Debian, Ubuntu, RHEL, SUSE/openSUSE, Fedora, igophe, ALT, FreeBSD.

umthombo: opennet.ru