[Bug 1484820] New: CVE-2017-12976 git-annex: RCE via ssh URL with an initial dash character in the hostname