Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server

Posted by vwpolo3 on Wednesday April 15, 2020 @06:08AM
from the github.com dept.

( 2 comments | 29 points | on HN )

Re:Malicious URLs cause Git (v2.26.0) to present stored cred... by vwpolo3 on Wednesday April 15, 2020 @06:12AM (#22876134)

Without upgrade, this might be exploited through package managers able to fetch from Git URLs (so NPM, Go Modules, and others).

[ Parent | on HN ]

Re:Malicious URLs cause Git (v2.26.0) to present stored cred... by lilyball on Wednesday April 15, 2020 @05:28PM (#22883284)

Xcode 11.4.1 came out today and it appears to contain the fix for this.

[ Parent | on HN ]