Then reset this, and you would continue to have the cached credentials available for other repositories (if any). You could also disable use of the Git credential cache using git config -global -unset credential.helper. So killing your git-credential-cache-daemon process throws all these away and results in re-prompting you for your password if you continue to use this as the cache.helper option. Fixes were written by Patrick Steinhardt of GitLab, with additional help from members of the Git security mailing list.Ĭredit for finding CVE-2022-41953 goes to 俞晨东.The Git credential cache runs a daemon process which caches your credentials in memory and hands them out on demand. Credit for CVE-2022-23521 goes to Markus Vervier, and Eric Sesterhenn of X41 D-Sec, whose work was sponsored by OSTIF.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |