git-annex/ security/ CVE-2014-6274

CVE-2014-6274: Security fix for S3 and glacier when using embedcreds=yes with encryption=pubkey or encryption=hybrid.

The creds embedded in the git repo were not encrypted. git-annex enableremote will warn when used on a remote that has this problem. For details, see insecure embedded creds.

Fixed in git-annex 5.20140919.

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/aarch64-linux-gnu/perl/5.40.1 /usr/local/share/perl/5.40.1 /usr/lib/aarch64-linux-gnu/perl5/5.40 /usr/share/perl5 /usr/lib/aarch64-linux-gnu/perl-base /usr/lib/aarch64-linux-gnu/perl/5.40 /usr/share/perl/5.40 /usr/local/lib/site_perl) at (eval 16926) line 1. BEGIN failed--compilation aborted at (eval 16926) line 1. ]]

Comments on this page are closed.