Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | mercurial | 2.2.2-4+deb7u1 |
| Debian · 8 | mercurial | 3.1.2-2+deb8u1 |
Vulnerabilities 1
-
Critical 9.8
Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command
The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.