diff options
| author |   Sergei Trofimovich <slyfox@gentoo.org> | 2017-08-21 22:31:46 +0100 |
|---|---|---|
| committer | Sergei Trofimovich <slyfox@gentoo.org> | 2017-08-21 22:32:29 +0100 |
| commit | 81d17e4af35cbecc7b28a96de8a62d80cf4d9e18 (patch) | |
| tree | f5759680d9a1ef2f9a1cbfdb89abea8dfe137a67 /dev-vcs/vcsh | |
| parent | app-vim/csound-syntax: stable for amd64+x86. (diff) | |
| download | gentoo-81d17e4af35cbecc7b28a96de8a62d80cf4d9e18.tar.gz gentoo-81d17e4af35cbecc7b28a96de8a62d80cf4d9e18.tar.bz2 gentoo-81d17e4af35cbecc7b28a96de8a62d80cf4d9e18.zip | |
dev-vcs/git-annex: bump up to 6.20170818, bug #628488
"""
git-annex before 6.20170818 allows remote attackers to execute
arbitrary commands via an ssh URL with an initial dash character
in the hostname, as demonstrated by an ssh://-eProxyCommand= URL,
a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116,
and CVE-2017-1000117.
"""
Reported-by: mbailey_j
Bug: https://bugs.gentoo.org/628488
Package-Manager: Portage-2.3.8, Repoman-2.3.3
Diffstat (limited to 'dev-vcs/vcsh')
0 files changed, 0 insertions, 0 deletions