projects / gentoo.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bb2e848) | patch
dev-vcs/git-annex: bump up to 6.20170818, bug #628488
authorSergei Trofimovich <slyfox@gentoo.org>
Mon, 21 Aug 2017 21:31:46 +0000 (22:31 +0100)
committerSergei Trofimovich <slyfox@gentoo.org>
Mon, 21 Aug 2017 21:32:29 +0000 (22:32 +0100)
commit81d17e4af35cbecc7b28a96de8a62d80cf4d9e18
treef5759680d9a1ef2f9a1cbfdb89abea8dfe137a67tree | snapshot
parentbb2e8488b8be9db5cf1ecfbc6d29b5515c1c7556commit | diff
dev-vcs/git-annex: bump up to 6.20170818, bug #628488

"""
git-annex before 6.20170818 allows remote attackers to execute
arbitrary commands via an ssh URL with an initial dash character
in the hostname, as demonstrated by an ssh://-eProxyCommand= URL,
a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116,
and CVE-2017-1000117.
"""

Reported-by: mbailey_j
Bug: https://bugs.gentoo.org/628488
Package-Manager: Portage-2.3.8, Repoman-2.3.3
dev-vcs/git-annex/Manifest diff | blob | history
dev-vcs/git-annex/git-annex-6.20170818.ebuild [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.