2.17.4

Git v2.17.4 Release Notes =========================

This release is to address the security issue: CVE-2020-5260

Fixes since v2.17.3 -------------------

With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol.

Credit for finding the vulnerability goes to Felix Wilhelm of Google Project Zero.

这篇文档对你有帮助吗？

1.5.0.1

1.5.0.2

1.5.0.3

1.5.0.4

1.5.0.5

1.5.0.6

1.5.0.7

1.5.0

1.5.1.1

1.5.1.2

1.5.1.3

1.5.1.4

1.5.1.5

1.5.1.6

1.5.1

1.5.2.1

1.5.2.2

1.5.2.3

1.5.2.4

1.5.2.5

1.5.2

1.5.3.1

1.5.3.2

1.5.3.3

1.5.3.4

1.5.3.5

1.5.3.6

1.5.3.7

1.5.3.8

1.5.3

1.5.4.1

1.5.4.2

1.5.4.3

1.5.4.4

1.5.4.5

1.5.4.6

1.5.4.7

1.5.4

1.5.5.1

1.5.5.2

1.5.5.3

1.5.5.4

1.5.5.5

1.5.5.6

1.5.5

1.5.6.1

1.5.6.2

1.5.6.3

1.5.6.4

1.5.6.5

1.5.6.6

1.5.6

1.6.0.1

1.6.0.2

1.6.0.3

1.6.0.4

1.6.0.5

1.6.0.6

1.6.0

1.6.1.1

1.6.1.2

1.6.1.3

1.6.1.4

1.6.1

1.6.2.1

1.6.2.2

1.6.2.3

1.6.2.4

1.6.2.5

1.6.2

1.6.3.1

1.6.3.2

1.6.3.3

1.6.3.4

1.6.3

1.6.4.1

1.6.4.2

1.6.4.3

1.6.4.4

1.6.4.5