https://bugzilla.redhat.com/show_bug.cgi?id=1484820

Bug ID: 1484820 Summary: CVE-2017-12976 git-annex: RCE via ssh URL with an initial dash character in the hostname Product: Security Response Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: haskell-devel@lists.fedoraproject.org, mathstuf@gmail.com, petersen@redhat.com

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

Upstream patch:

http://source.git-annex.branchable.com/?p=source.git;a=commit;h=df11e54788b2...