Bug#864001: git-annex: Possible SHA-1 vulnerability: fixed in newer releases

2024-02-18 Thread Antoine Beaupre
Source: git-annex Followup-For: Bug #864001 Control: fixed -1 7.20190129-3 Seems to me this should be closed; the fixed version has shipped in Debian eons ago. -- System Information: Debian Release: 12.5 APT prefers stable-security APT policy: (500, 'stable-security'), (500,

Bug#864001: git-annex: Possible SHA-1 vulnerability: fixed in newer releases

2017-06-02 Thread Philipp Kaluza
Package: git-annex Version: 6.20170101-1+b1 Severity: minor Hi Richi, hi All, on 2017-02-25, Joey found two corner cases in git-annex where the newly demonstrated SHA-1 collision weakness (as used in git) could also impact git-annex, *even when used with signed commits*.