CVE-2014-6274
S3 and Glacier remotes creds embedded in the git repo were not encrypted
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
S3 and Glacier remotes creds embedded in the git repo were not encrypted
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in (effectively) plaintext, not encrypted as they were supposed to be. This issue affects git-annex: from 3.20121126 before 5.20140919.
Reserved 2014-09-09 | Published 2025-06-26 | Updated 2025-06-26 | Assigner debiangit-annex.branchable.com/upgrades/insecure_embedded_creds/
Support options
