523640 – (CVE-2014-6274) <dev-vcs/git-annex-5.20140919: S3 and Glacier remotes creds embedded in the git repo were not encrypted (CVE-2014-6274)

Bug 523640 (CVE-2014-6274) - <dev-vcs/git-annex-5.20140919: S3 and Glacier remotes creds embedded in the git repo were not encrypted (CVE-2014-6274)

Summary: <dev-vcs/git-annex-5.20140919: S3 and Glacier remotes creds embedded in the g...

Status:	RESOLVED FIXED

Alias:	CVE-2014-6274

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal trivial (vote)
Assignee:	Gentoo Security

URL:	https://git-annex.branchable.com/news...
Whiteboard:	~3 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2014-09-24 19:50 UTC by Manuel Rüger (RETIRED)
Modified:	2015-09-18 12:23 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Manuel Rüger (RETIRED) gentoo-dev

2014-09-24 19:50:20 UTC

Please add a new version and remove the old one.

Comment 1 Sergei Trofimovich (RETIRED) gentoo-dev

2014-10-04 17:15:46 UTC

Pushed new version and deleted all old ones as:

> *git-annex-5.20140927 (04 Oct 2014)
>
>  04 Oct 2014; Sergei Trofimovich <slyfox@gentoo.org>
>  +git-annex-5.20140927.ebuild, -files/git-annex-5.20140717-old-feed.patch,
>  -git-annex-3.20121211-r2.ebuild, -git-annex-4.20130815-r1.ebuild,
>  -git-annex-5.20140306-r1.ebuild, -git-annex-5.20140405.ebuild,
>  -git-annex-5.20140613.ebuild, -git-annex-5.20140709.ebuild,
>  -git-annex-5.20140717.ebuild, -git-annex-5.20140831.ebuild:
>  Version bump, drop old versions due to CVE-2014-6274 aka #523640: S3 and
>  Glacier remotes creds embedded in the git repo were not encrypted