Skip to content
OpenAdvisories
High DSA-3570-1 1 CVE

mercurial - security update

Published May 5, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 mercurial 3.1.2-2+deb8u3

Vulnerabilities 1

  • High 8.8
    CVE-2016-3105

    Mercurial vulnerable to arbitrary code execution when converting Git repos

    The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.

    mercurial mercurial mercurial Debian Ubuntu PyPI