ืคึฟืึทืจืขืคึฟื ืืืขืื ืงืขืจืขืงืืืื ืจืืืืกืื ืคืื ืื ืคืื ืื ืืขืจืืขืืืืื ืืงืืจ ืงืึธื ืืจืึธื ืกืืกืืขื ืืื 2.26.2, 2.25.4, 2.24.3, 2.23.3, 2.22.4, 2.21.3, 2.20.4, 2.19.5, 2.18.4 ืืื 2.17.5, ืืื ืืืึธืก ืืืืืึทื ืืืืึทื ืืืึทืื ืขืจืึทืืืืืื (CVE-2020-11008), ืืขืจืืื ื ืื ืคึผืจืึธืืืขื, ืืืืืึทื ืืืืึทื ืืขืฆืืข ืืืึธื. ืื ื ืืึทืข ืืืึทืื ืขืจืึทืืืืืื ืืืื ืึทืคืขืงืฅ "credential.helper" ืืึทื ืืืขืจืก ืืื ืืื ืขืงืกืคึผืืืืืึทื ืืืขื ืคืึธืจื ืึท ืกืคึผืขืฆืืขื ืคืึธืจืืึทืืืขื URL ืืื ืึท ื ืืึท-ืืื ืข ืืึทืจืึทืงืืขืจ, ืึท ืืืืืืง ืืึทืืขืืึธืก ืึธืืขืจ ืึทื ืื ืกืคึผืขืกืืคืืขื ืืขืื ืกืืขืืข. ืืืขื ืคึผืจืึทืกืขืกืื ื ืึทืืึท ืึท URL, credential.helper ืกืขื ืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืงืจืึทืืขื ืืฉืึทืื ืืืึธืก ืืึธื ื ืื ืฉืืืืขื ืืื ืื ืืขืืขืื ืคึผืจืึธืืึธืงืึธื ืึธืืขืจ ืืขืจ ืืึทืืขืืึธืก ืืืึธืก ืืื ืึทืงืกืขืกื.
ื ืื ืขื ืืขื ืืขื ืคืจืืขืจืืืงื ืคึผืจืึธืืืขื, ืืืขื ื ืืฆื ืึท ื ืืึท ืืืึทืื ืขืจืึทืืืืืื, ืืขืจ ืึทืืึทืงืขืจ ืงืขื ื ืืฉื ืงืึธื ืืจืึธืืืจื ืื ืืึทืืขืืึธืก ืคืื ืืืึธืก ืขืืขืฆืขืจ ืึทื ืืขืจืฉ ืก ืงืจืึทืืขื ืืฉืึทืื ืืืขื ืืืื ืืจืึทื ืกืคืขืจื. ืืืึธืก ืงืจืึทืืขื ืืฉืึทืื ืืขื ืขื ืืืงื ืืขืคึผืขื ืืก ืืืืฃ ืืื ืื ืคืขืื ืืืง "ืืึทืืขืืึธืก" ืคึผืึทืจืึทืืขืืขืจ ืืื ืืึทื ืืึทืื ืืื credential.helper. ืื ืืึทืจืฅ ืคืื ืื ืคึผืจืึธืืืขื ืืื ืึทื ืืืืืืง ืคืขืืืขืจ ืืื ืื URL ืืขื ืขื ืื ืืขืจืคึผืจืึทืืึทื ืืืจื ืคืืืข credential.helper ืืึทื ืืืขืจืก ืืื ืื ืกืืจืึทืงืฉืึทื ื ืฆื ืฆืืืืืื ืงืืื ืงืจืึทืืขื ืืฉืึทืื ืฆื ืื ืงืจืึทื ื ืืขืื. ืึทืืื, credential.helper ืงืขื ืขื ืฉืืงื ืงืจืึทืืขื ืืฉืึทืื ืกืืึธืจื ืคึฟืึทืจ ืื ืื ืืขืจ ืกืขืจืืืขืจ ืฆื ืื ืึทืืึทืงืขืจ ืก ืกืขืจืืืขืจ ืกืคึผืขืกืืคืืขื ืืื ืื URL.
ืืขืจ ืคึผืจืึธืืืขื ืึทืงืขืจื ืืืขื ืคึผืขืจืคืึธืจืืื ื ืึทืคึผืขืจืืืฉืึทื ื ืึทืืึท ืืื "ืืื ืงืืึธืื" ืืื "ืืื ืืจืขื ืืขื", ืึธืืขืจ ืืื ืืขืจืกื ืืขืคืขืจืืขื ืืืขื ืคึผืจืึทืกืขืกืื ื ืกืืืืึธืืืืขืก - ืืืขื ืคึผืขืจืคืึธืจืืื ื "ืืื ืกืืืืึธืืืืข ืืขืจืืืึทื ืืืงื", ืื URL ืก ืกืคึผืขืกืืคืืขื ืืื ืื .ืืืืืึธืืืืขืก ืืขืงืข ืคืื โโืื ืจืืคึผืึทืืึทืืึธืจื ืืขื ืขื ืืืืืึธืืึทืืืฉ ืคึผืจืึทืกืขืกื. ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื ืฆื ืคืึทืจืฉืคึผืึทืจื ืืขื ืคึผืจืึธืืืขื ืจืขืงืึทืืขื ืืื ืื ืืืืกื ื ืืฉื ื ืืฆื credential.helper ืืืขื ืึทืงืกืขืก ืฆื ืฆืืืืจ ืจืืคึผืึทืืึทืืึธืจืื ืืื ืืึธื ื ืื ื ืืฆื "ืืื ืงืืึธืื" ืืื "--ืจืขืงืืจืกืข-ืกืืืืึธืืืืขืก" ืืึธืืข ืืื ืื ืืฉืขืงืงืขื ืจืืคึผืึทืืึทืืึธืจืื.
ืืขืคึฟืื ื ืืื ื ืืึทืข Git ืจืืืืกืื ืงืขืจืขืงืฉืึทื ืคึผืจืืืืขื ืฅ ืจืืคื credential.helper ืคึฟืึทืจ URL ืก ืืื ืื ืจืขืคึผืจืขืกืขื ืืึทืืืข ืืืึทืืืขืก (ืืืฉื, ืืืขื ืกืคึผืขืฆืืคืืฆืืจื ืืจืื ืกืืึทืฉืื ืึทื ืฉืืึธื ืคืื ืฆืืืื - "ืืืืคึผ:///ืืึธืกื" ืึธืืขืจ ืึธื ืึท ืคึผืจืึธืืึธืงืึธื ืกืืขืืข - "http::ftp.example.com/"). ืื ืึทืจืืืกืืขืื ืึทืคืขืงืฅ ืื ืงืจืึธื (ืืขืืืื-ืืื Git ืงืจืึทืืขื ืืฉืึทื ืกืืึธืจืืืืฉ), ืงืึทืฉ (ืืขืืืื ืงืึทืฉ ืคืื ืืจืืื ืงืจืึทืืขื ืืฉืึทืื) ืืื osxkeychain (macOS ืกืืึธืจืืืืฉ) ืืึทื ืืืขืจืก. ืื Git Credential Manager (Windows ืจืืคึผืึทืืึทืืึธืจื) ืืึทื ืืืขืจ ืืื ื ืืฉื ืึทืคืขืงืืึทื.
ืืืจ ืงืขื ืขื ืฉืคึผืืจ ืื ืืขืืืื ื ืคืื ืคึผืขืงื ืืขืจืืืึทื ืืืงืื ืืขื ืืื ืืืกืืจืืืืืฉืึทื ื ืืืืฃ ืื ืืืขืืขืจ ืืขืืืึทื, ืืืื ืื, rhel, SUSE/openSUSE, ืคืขืืึธืจืึท, ืึทืจืืฉ, ืึทืื, FreeBSD.
ืืงืืจ: opennet.ru