Debian/yadm: medium 5.9
yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH an
Action: Upgrade yadm to 1.11.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.1-1 | - |
Fixed versions
| 1.11.1-1 |
Sources
- osv: DEBIAN-CVE-2017-11353#Debian:13/yadm
- https://security-tracker.debian.org/tracker/CVE-2017-11353
published · modified · JSON