Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | mercurial | 2.2.2-4+deb7u2 |
| Debian · 8 | mercurial | 3.1.2-2+deb8u2 |
Vulnerabilities 3
-
High 8.8
Mercurial arbitrary code execution via a crafted git ext:: URL
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
-
High 8.8
Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
-
High 8.8
Mercurial arbitrary code execution vulnerability
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records.