Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

Debian: New git-core packages fix buffer overflow

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Debian: New git-core packages fix buffer overflow
# 1  
Old 09-15-2008
Debian: New git-core packages fix buffer overflow
LinuxSecurity.com: Multiple vulnerabilities have been identified in git-core, the core of the git distributed revision control system. Improper path length limitations in git's diff and grep functions, in combination with maliciously crafted repositories or changes, could enable a stack buffer overflow and potentially the execution of arbitrary code.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

git-credential-store

GIT-CREDENTIAL-STO(1)						    Git Manual						     GIT-CREDENTIAL-STO(1)

NAME

       git-credential-store - helper to store credentials on disk

SYNOPSIS

       git config credential.helper 'store [options]'

DESCRIPTION

	   Note
	   Using this helper will store your passwords unencrypted on disk, protected only by filesystem permissions. If this is not an acceptable
	   security tradeoff, try git-credential-cache(1), or find a helper that integrates with secure storage provided by your operating system.

       This command stores credentials indefinitely on disk for use by future git programs.

       You probably don't want to invoke this command directly; it is meant to be used as a credential helper by other parts of git. See
       gitcredentials(7) or EXAMPLES below.

OPTIONS

       --store=<path>
	   Use <path> to store credentials. The file will have its filesystem permissions set to prevent other users on the system from reading
	   it, but will not be encrypted or otherwise protected. Defaults to ~/.git-credentials.

EXAMPLES

       The point of this helper is to reduce the number of times you must type your username or password. For example:

	   $ git config credential.helper store
	   $ git push http://example.com/repo.git
	   Username: <type your username>
	   Password: <type your password>

	   [several days later]
	   $ git push http://example.com/repo.git
	   [your credentials are used automatically]

STORAGE FORMAT

       The .git-credentials file is stored in plaintext. Each credential is stored on its own line as a URL like:

	   https://user:pass@example.com

       When git needs authentication for a particular URL context, credential-store will consider that context a pattern to match against each
       entry in the credentials file. If the protocol, hostname, and username (if we already have one) match, then the password is returned to
       git. See the discussion of configuration in gitcredentials(7) for more information.

GIT

       Part of the git(1) suite

Git 1.7.10.4							    11/24/2012						     GIT-CREDENTIAL-STO(1)