Threats
Vulnerabilities and patches
Breaches and privacy
Research
World
Learn
Wednesday 4 November
Global

Your region, kept on this device.

DonateGet the appSign in

Vulnerability · 1 source · latest 2d

Debian issues security update for git-annex fixing a data exfiltration flaw

Severity
Medium
Sources
1

What happened

Debian advisory DSA-6603-1 covers a git-annex vulnerability that could result in data exfiltration. The upstream advisory describes cross-repository data exfiltration via special remotes. The Debian advisory does not list a CVE identifier, affected versions or a fixed version in the text provided. Defenders using git-annex should apply the Debian update and review the upstream advisory for affected configurations.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Apply the Debian security update for git-annex as described in DSA-6603-1.
  2. Review the upstream git-annex advisory on cross-repository data exfiltration via special remotes to check whether your setup is affected.

Written by AI from the sources, checked against them

Read the full story at the source

Full story timeline · 1 update

  1. Mon 2 NovemberDSA-6603-1 git-annex - security updateDebian Security Advisories

Who reported · 1 outlet

Debian Security Advisories

Report a problem