Medium DLA-1764-1 1 CVE

mercurial - security update

Published Apr 25, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	mercurial	3.1.2-2+deb8u7

Vulnerabilities 1

Medium 5.1

CVE-2019-3902

Mercurial Path Traversal/Link Following vulnerability

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

The Mercurial Project mercurial mercurial mercurial Debian Ubuntu Alpine PyPI

Apr 22, 2019