Live data from Hacker News

Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server

Post reply on HN

Print view View original

1–3 of 3 posts

Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server

#1

Post by vwpolo3 » Wed, Apr 15, 2020, 10:08 AM UTC

Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server
github.com

Re: Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server

#2

Post by vwpolo3 » Wed, Apr 15, 2020, 10:12 AM UTC

Without upgrade, this might be exploited through package managers able to fetch from Git URLs (so NPM, Go Modules, and others).

Re: Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server

#3

Post by lilyball » Wed, Apr 15, 2020, 9:28 PM UTC

Xcode 11.4.1 came out today and it appears to contain the fix for this.

Post reply on HN