https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:36:37 +0000 https://cve.radiocsirt.org/vuln/brew-git-annex-cve-2018-10859 <p><strong>Affected:</strong> Homebrew: git-annex</p> <p># *git-annex* GPG decryption attack via compromised remote</p> <p>A malicious server for a special remote could trick `git-annex` into decrypting a file that was encrypted to the user&#39;s GPG key. This attack could be used to expose encrypted data that was never stored in *git-annex*. Daniel Dent discovered this attack in collaboration with Joey Hess.</p> <p>To perform this attack the attacker needs control of a server hosting an *encrypted* special remote used by the victim&#39;s *git-annex* repository. The attacker uses `git annex addurl --relaxed` with an innocuous URL, and waits for the user&#39;s `git-annex` to download it, and upload an (encrypted) copy to the special remote they also control. At some later point, when the user downloads the content from the special remote, the attacker instead sends them the content of the GPG-encrypted file that they wish to have decrypted in its place (which may have been exfiltrated from the victim&#39;s system via the attack described in **HSEC-2023-0010** / **CVE-2018-10857**, or acquired by other means). Finally, the attacker drops their own copy of the original innocuous URL, and waits for the victim `git-annex` to send them the accidentially decrypted file.</p> <p>The issue was fixed by making `git-annex` refuse to download encrypted content from special remotes, unless it knows the hash of the expected content. When the attacker provides some other GPG-encrypted content, it will fail the hash check and be discarded.</p> <p><strong>Affected:</strong> Homebrew: git-annex</p> <p># *git-annex* GPG decryption attack via compromised remote</p> <p>A malicious server for a special remote could trick `git-annex` into decrypting a file that was encrypted to the user&#39;s GPG key. This attack could be used to expose encrypted data that was never stored in *git-annex*. Daniel Dent discovered this attack in collaboration with Joey Hess.</p> <p>To perform this attack the attacker needs control of a server hosting an *encrypted* special remote used by the victim&#39;s *git-annex* repository. The attacker uses `git annex addurl --relaxed` with an innocuous URL, and waits for the user&#39;s `git-annex` to download it, and upload an (encrypted) copy to the special remote they also control. At some later point, when the user downloads the content from the special remote, the attacker instead sends them the content of the GPG-encrypted file that they wish to have decrypted in its place (which may have been exfiltrated from the victim&#39;s system via the attack described in **HSEC-2023-0010** / **CVE-2018-10857**, or acquired by other means). Finally, the attacker drops their own copy of the original innocuous URL, and waits for the victim `git-annex` to send them the accidentially decrypted file.</p> <p>The issue was fixed by making `git-annex` refuse to download encrypted content from special remotes, unless it knows the hash of the expected content. When the attacker provides some other GPG-encrypted content, it will fail the hash check and be discarded.</p> https://cve.radiocsirt.org/vuln/brew-git-annex-cve-2018-10859 https://cve.radiocsirt.org/vuln/cnvd-2018-13686 cnvd-2018-13686 https://cve.radiocsirt.org/vuln/cnvd-2018-13686 https://cve.radiocsirt.org/vuln/euvd-2026-64850 EUVD-2026-64850 https://cve.radiocsirt.org/vuln/euvd-2026-64850 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10859 <p>git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user&#39;s gpg key. This attack could be used to expose encrypted data that was never stored in git-annex</p> <p>git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user&#39;s gpg key. This attack could be used to expose encrypted data that was never stored in git-annex</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10859 https://cve.radiocsirt.org/vuln/ghsa-j24g-q5jp-xg4v <p>git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user&#39;s gpg key. This attack could be used to expose encrypted data that was never stored in git-annex</p> <p>git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user&#39;s gpg key. This attack could be used to expose encrypted data that was never stored in git-annex</p> https://cve.radiocsirt.org/vuln/ghsa-j24g-q5jp-xg4v https://cve.radiocsirt.org/vuln/gsd-2018-10859 gsd-2018-10859 https://cve.radiocsirt.org/vuln/gsd-2018-10859 https://cve.radiocsirt.org/vuln/hsec-2023-0011 <p><strong>Affected:</strong> Hackage: git-annex</p> <p># *git-annex* GPG decryption attack via compromised remote</p> <p>A malicious server for a special remote could trick `git-annex` into decrypting a file that was encrypted to the user&#39;s GPG key. This attack could be used to expose encrypted data that was never stored in *git-annex*. Daniel Dent discovered this attack in collaboration with Joey Hess.</p> <p>To perform this attack the attacker needs control of a server hosting an *encrypted* special remote used by the victim&#39;s *git-annex* repository. The attacker uses `git annex addurl --relaxed` with an innocuous URL, and waits for the user&#39;s `git-annex` to download it, and upload an (encrypted) copy to the special remote they also control. At some later point, when the user downloads the content from the special remote, the attacker instead sends them the content of the GPG-encrypted file that they wish to have decrypted in its place (which may have been exfiltrated from the victim&#39;s system via the attack described in **HSEC-2023-0010** / **CVE-2018-10857**, or acquired by other means). Finally, the attacker drops their own copy of the original innocuous URL, and waits for the victim `git-annex` to send them the accidentially decrypted file.</p> <p>The issue was fixed by making `git-annex` refuse to download encrypted content from special remotes, unless it knows the hash of the expected content. When the attacker provides some other GPG-encrypted content, it will fail the hash check and be discarded.</p> <p><strong>Affected:</strong> Hackage: git-annex</p> <p># *git-annex* GPG decryption attack via compromised remote</p> <p>A malicious server for a special remote could trick `git-annex` into decrypting a file that was encrypted to the user&#39;s GPG key. This attack could be used to expose encrypted data that was never stored in *git-annex*. Daniel Dent discovered this attack in collaboration with Joey Hess.</p> <p>To perform this attack the attacker needs control of a server hosting an *encrypted* special remote used by the victim&#39;s *git-annex* repository. The attacker uses `git annex addurl --relaxed` with an innocuous URL, and waits for the user&#39;s `git-annex` to download it, and upload an (encrypted) copy to the special remote they also control. At some later point, when the user downloads the content from the special remote, the attacker instead sends them the content of the GPG-encrypted file that they wish to have decrypted in its place (which may have been exfiltrated from the victim&#39;s system via the attack described in **HSEC-2023-0010** / **CVE-2018-10857**, or acquired by other means). Finally, the attacker drops their own copy of the original innocuous URL, and waits for the victim `git-annex` to send them the accidentially decrypted file.</p> <p>The issue was fixed by making `git-annex` refuse to download encrypted content from special remotes, unless it knows the hash of the expected content. When the attacker provides some other GPG-encrypted content, it will fail the hash check and be discarded.</p> https://cve.radiocsirt.org/vuln/hsec-2023-0011 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10859 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: git-annex, Ubuntu:18.04:LTS: git-annex</p> <p>git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user&#39;s gpg key. This attack could be used to expose encrypted data that was never stored in git-annex</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: git-annex, Ubuntu:18.04:LTS: git-annex</p> <p>git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user&#39;s gpg key. This attack could be used to expose encrypted data that was never stored in git-annex</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10859