This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-13353 →
DEBIAN-CVE-2020-13353
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.
Original description
The description as published by the source.
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:13
gitaly
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3.9-1"}]}]
References
- advisory security-tracker.debian.org