Skip to content
OpenAdvisories
Unscored DSA-4010-1 1 CVE

git-annex - security update

Published Oct 30, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 git-annex 5.20141125+deb8u1
Debian · 9 git-annex 6.20170101-1+deb9u1

Vulnerabilities 1

  • Unscored —
    CVE-2017-12976

    git-annex command injection via malicious SSH hostname

    git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-100011…

    git-annex git-annex git-annex Debian Ubuntu Hackage