[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2016:0706 -- centos 7 mercurial

ID: oval:org.secpod.oval:def:203924Date: (C)2016-05-06   (M)2022-10-10
Class: PATCHFamily: unix




Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Security Fix: * It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. * It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. Red Hat would like to thank Blake Burkhart for reporting these issues.

Platform:
CentOS 7
Product:
mercurial
Reference:
CESA-2016:0706
CVE-2016-3068
CVE-2016-3069
CVE    2
CVE-2016-3068
CVE-2016-3069
CPE    2
cpe:/a:atlassian:mercurial
cpe:/o:centos:centos:7

© SecPod Technologies