Debian/git-annex: high 7.5
git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's gpg key.
Action: Upgrade git-annex to 6.20180626-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.20180626-1 | - |
Fixed versions
| 6.20180626-1 |
Sources
- osv: DEBIAN-CVE-2018-10859#Debian:14/git-annex
- https://security-tracker.debian.org/tracker/CVE-2018-10859
published · modified · JSON