Vulnerability Bulletins |
DSA-4010 git-annex - security update |
|
| Affected software | Debian |
|
It was discovered that git-annex, a tool to manage files with gitwithout checking their contents in, did not correctly handlemaliciously constructed ssh:// URLs. This allowed an attacker to runan arbitrary shell command. More info: https://www.debian.org/security/2017/dsa-4010 |
|