[Bug 1484822] CVE-2017-12976 git-annex: RCE via ssh URL with an initial dash character in the hostname [epel-all]