< back to search

shield Security update for mercurial

SUSE-SLE-SDK-12-SP3-2017-1375

This update for mercurial fixes the following issues: - CVE-2017-1000115: path traversal via symlink could lead to unauthorized access (bsc#1053344) - CVE-2017-1000116: argument injection in SSH URLs could lead to client-side code execution (bsc#1052696)

Release Date

Aug 24 2017
References

Bugzilla: 1053344, 1052696
CVEs: CVE-2017-1000116, CVE-2017-1000115
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

Packages

mercurial
Scalable Distributed SCM

2.8.2-15.3.1 lock rpm lock src

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

Packages

mercurial
Scalable Distributed SCM

2.8.2-15.3.1 lock rpm lock src

SUSE Linux Enterprise Software Development Kit 12.3 s390x

Packages

mercurial
Scalable Distributed SCM

2.8.2-15.3.1 lock rpm lock src

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

Packages

mercurial
Scalable Distributed SCM

2.8.2-15.3.1 lock rpm lock src