181 matches found
MGASA-2020-0175 Updated git packages fix security vulnerability
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol CVE-2020-5260...
Exploit for Insufficiently Protected Credentials in Git
CVE-2020-5260 CVE-2020-5260 Demonstration Record When exe...
OPENSUSE-SU-2020:0524-1 Security update for git
This update for git fixes the following issues: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. This update was imported from the SUSE:SLE-15:Update update project...
About the security content of Xcode 11.4.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Amazon Linux 2 : git (ALAS-2020-1409)
The version of git installed on the remote host is prior to 2.23.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1409 advisory. With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a...
Exploit for Insufficiently Protected Credentials in Git
cve-2020-5260 A HTTP PoC Endpoint for cve-2020-5260 which can...
CVE-2020-5260
A flaw was found in git. Credentials can be leaked through the use of a crafted URL that contains a newline, fooling the credential helper to give information for a different host. Highest threat from the vulnerability is to data confidentiality. Mitigation The most complete workaround is to...
Slackware 14.0 / 14.1 / 14.2 / current : git (SSA:2020-105-01)
New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-105-01. The text itself is copyright C Slackware Linux,...
Important: git
Issue Overview: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol. CVE-2020-5260...
SUSE SLES12 Security Update : git (SUSE-SU-2020:0992-1)
This update for git fixes the following issues : Security issue fixed : CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. Non-security issue fixed : git was updated to 2.26.0 f...
Debian DSA-4657-1 : git - security update
Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential information for a wrong host. C Tenable Network Security, Inc. The...
Security fix for the ALT Linux 9 package git version 2.25.3-alt1
2.25.3-alt1 built April 15, 2020 Dmitry V. Levin in task 249983 --- March 18, 2020 Dmitry V. Levin - 2.25.2 - 2.25.3 fixes: CVE-2020-5260...
SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2020:0991-1)
This update for git fixes the following issues : CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. Note that Tenable Network Security has extracted the preceding description...
CVE-2020-5260
CVE-2020-5260 affects Git by newline-injection in the credential helper protocol, enabling a crafted URL to exfiltrate credentials from one host to another. Affected Git releases were patched in April 2020; fixes are in 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26....
[SECURITY] [DSA 4657-1] git security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4657-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 14, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4657-1] git security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4657-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 14, 2020 https://www.debian.org/security/faq -...
SUSE-SU-2020:0992-1 Security update for git
This update for git fixes the following issues: Security issue fixed: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. Non-security issue fixed: git was updated to 2.26.0 fo...
SUSE-SU-2020:0991-1 Security update for git
This update for git fixes the following issues: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930...
CVE-2020-5260
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system...