ืงืขืจืขืงืืืื ืจืืืืกืื ืคืื ืื ืคืื ืื ืืขืจืืขืืืืื ืืงืืจ ืงืึธื ืืจืึธื ืกืืกืืขื ืืื 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7 ืืื 2.30.8 ืืขื ืขื ืืจืืืก, ืืืึธืก ืคืึทืจืจืืืื ืฆืืืื ืืืึทืื ืขืจืึทืืืืืืื, ืึทืคืขืงืืื ื ืึธืคึผืืืืืืึทืืืึธื ืก ืคึฟืึทืจ ืืืืข ืงืืึธืื ืื ื ืืื ืื "ืืื ืฆืืืืืื" ืืึทืคึฟืขื. ืืืจ ืงืขื ืขื ืฉืคึผืืจ ืื ืืขืืืื ื ืคืื ืคึผืขืงื ืืขืจืืืึทื ืืืงืื ืืขื ืืื ืืืกืืจืืืืืฉืึทื ื ืืืืฃ ืื ืืืขืืขืจ ืคืื Debian, Ubuntu, RHEL, SUSE/openSUSE, Fedora, Arch, FreeBSD. ืืืื ืขืก ืืื ื ืื ืืขืืืขื ืฆื ืื ืกืืึทืืืจื ืื ืืขืจืืืึทื ืืืงื, ืขืก ืืื ืจืขืงืึทืืขื ืืื ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื ืฆื ืืืกืืืืื ืืืจืืคืืจื ืื "ืืื ืงืืึธืื" ืึธืคึผืขืจืึทืฆืืข ืืื ืื "--recurse-submodules" ืึธืคึผืฆืืข ืืืืฃ ืึทื ืืจืึทืกื ืจืืคึผืึทืืึทืืึธืจืื, ืืื ืฆื ืืืกืืืืื ื ืืฆื ืื "ืืื ืฆืืืืืื" ืืื " git am" ืงืึทืืึทื ืื ืืืืฃ ืึทื ืืจืึทืกื ืจืืคึผืึทืืึทืืึธืจืื. ืงืึธื.
- ืื CVE-2023-22490 ืืืึทืื ืขืจืึทืืืืืื ืึทืืึทืื ืึท ืึทืืึทืงืขืจ ืืืึธืก ืงืึธื ืืจืึธืืก ืื ืืื ืืึทืื ืคืื ืึท ืงืืึธืื ื ืจืืคึผืึทืืึทืืึธืจื ืฆื ืืึทืงืืืขื ืึทืงืกืขืก ืฆื ืฉืคึผืืจืขืืืืืง ืืึทืื ืืืืฃ ืื ืืึทื ืืฆืขืจ 'ืก ืกืืกืืขื. ืฆืืืื ืคืืึธื ืืืืฉืืืืขืจื ืฆื ืื ืืืขืจืืืฉืึทื ืก ืคืื ืืืึทืื ืขืจืึทืืืืืื:
ืืขืจ ืขืจืฉืืขืจ ืคืืึธ ืึทืืึทืื, ืืืขื ืืจืืขืื ืืื ืึท ืกืคึผืขืฉืึทืื ืืืืืื ื ืจืืคึผืึทืืึทืืึธืจื, ืฆื ืืขืจืืจืืืื ืื ื ืืฆื ืคืื ืืืืข ืงืืึธืื ืื ื ืึธืคึผืืืืืืึทืืืึธื ืก ืืคืืื ืืืขื ืืืจ ื ืืฆื ืึท ืึทืจืืืขืจืคืืจื ืืืึธืก ืื ืืขืจืึทืงืฅ ืืื ืคืื ืืจืืืกื ืืืง ืกืืกืืขืืขื.
ืืขืจ ืฆืืืืืืขืจ ืคืืึธ ืึทืืึทืื ืื ืคึผืืืืกืืึทื ื ืคืื ืึท ืกืืืืึธืืืฉ ืืื ืง ืึทื ืฉืืึธื ืคืื ืื $GIT_DIR/objects ืืืขืืืืืึทืืขืจ, ืขื ืืขื ืฆื ืื ืืืึทืื ืขืจืึทืืืืืื CVE-2022-39253, ืื ืคืึทืจืจืืืื ืคึฟืึทืจ ืืืึธืก ืืืึทืงื ืื ืคึผืืืืกืืึทื ื ืคืื ืกืืืืึธืืืฉ ืคึฟืึทืจืืื ืืื ืืขื ืืื ืื $GIT_DIR/objects ืืืขืืืืืึทืืขืจ, ืึธืืขืจ ืืื ื ืืฉื. ืงืึธื ืืจืึธืืืจื ืื ืคืึทืงื ืึทื ืื $GIT_DIR/objects ืืืขืืืืืึทืืขืจ ืืื ืงืขื ืืืื ืึท ืกืืืืึธืืืฉ ืืื ืง.
ืืื ืืืืข ืงืืึธืื ืื ื ืืึธืืข, ืืื ืืจืึทื ืกืคืขืจืก $ GIT_DIR / ืึทืืืืฉืขืงืฅ ืฆื ืื ืฆืื ืืืขืืืืืึทืืขืจ ืืืจื ืืืคืขืจืขื ืกืื ื ืื ืกืืืืื ืงืก, ืืืึธืก ื ืื ืืืจืขืงื ืจืขืคืขืจืขื ืกืขื ืืขืงืขืก ืฆื ืืืื ืงืึทืคึผืื ืฆื ืื ืฆืื ืืืขืืืืืึทืืขืจ. ืกืืืืืฉืื ื ืฆื ื ืืฆื ืืืืข ืงืืึธืื ืื ื ืึธืคึผืืืืืืึทืืืึธื ืก ืคึฟืึทืจ ื ืื-ืืืืข ืึทืจืืืขืจืคืืจื ืึทืืึทืื ืขืงืกืคึผืืืืืืืฉืึทื ืคืื ืืืึทืื ืขืจืึทืืืืืืื ืืืขื ืืจืืขืื ืืื ืคืื ืืจืืืกื ืืืง ืจืืคึผืึทืืึทืืึธืจืื (ืืืฉื, ืจืขืงืืจืกืืืืื ืึทืจืืึทื ืืขืจืขืื ื ืกืืืืึธืืืืขืก ืืื ืื ืืึทืคึฟืขื "ืืื clone โrecurse-submodules" ืงืขื ืขื ืคืืจื ืฆื ืงืืึธืื ืื ื ืคืื ืึท ืืืืืข ืจืืคึผืึทืืึทืืึธืจื ืคึผืึทืงืืืืฉื ืืื ืึท ืกืืืืึธืืืืข. ืืื ืื ืื ืืขืจ ืจืืคึผืึทืืึทืืึธืจื).
- ืืืึทืื ืขืจืึทืืืืืื CVE-2023-23946 ืึทืืึทืื ืื ืืื ืืึทืื ืคืื ืืขืงืขืก ืึทืจืืืก ืื ืึทืจืืขื ืืืขืืืืืึทืืขืจ ืฆื ืืืื ืึธืืืืขืจืจืืืึทื ืืืจื ืคืึธืจื ืกืคึผืขืฆืืขื ืงืจืึทืคืืขื ืึทืจืืึทื ืฉืจืืึทื ืฆื ืื "ืืื ืฆืืืืืื" ืืึทืคึฟืขื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืึท ืืึทืคืึทืื ืงืขื ืขื ืืืื ืืืจืืืขืงืึธืื ืืขืฉืึทืก ืื ืคึผืจืึทืกืขืกืื ื ืคืื ืคึผืึทืืฉืึทื ืฆืืืขืืจืืื ืืืจื ืึท ืึทืืึทืงืขืจ ืืื "ืืื ืฆืืืืืื". ืฆื ืคืึทืจืฉืคึผืึทืจื ืคึผืึทืืฉืึทื ืคืื ืงืจืืืืืื ื ืืขืงืขืก ืึทืจืืืก ืคืื ืื ืึทืจืืขื ืงืึธืคึผืืข, "ืืื ืฆืืืืืื" ืืืึทืงืก ืคึผืจืึทืกืขืกืื ื ืคืื ืคึผืึทืืฉืึทื ืืืึธืก ืคึผืจืืืื ืฆื ืฉืจืืึทืื ืึท ืืขืงืข ืืื ืกืืืืื ืงืก. ืืืขืจ ืขืก ืืืจื ืก ืืืืก ืึทื ืืขื ืฉืืฅ ืงืขื ืขื ืืืื ืืืืคึผืึทืกื ืืืจื ืฉืึทืคึฟื ืึท ืกืืืืึธืืืฉ ืืื ืง ืืื ืืขืจ ืขืจืฉืืขืจ ืึธืจื.
ืืงืืจ: opennet.ru