ID OPENVAS:1361412562310122930 Type openvas Reporter Eero Volotinen Modified 2019-03-14T00:00:00
Description
Oracle Linux Local Security Checks ELSA-2016-0706
###############################################################################
# OpenVAS Vulnerability Test
# $Id: ELSA-2016-0706.nasl 14180 2019-03-14 12:29:16Z cfischer $
#
# Oracle Linux Local Check
#
# Authors:
# Eero Volotinen <eero.volotinen@solinor.fi>
#
# Copyright:
# Copyright (c) 2016 Eero Volotinen, http://solinor.fi
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.122930");
script_version("$Revision: 14180 $");
script_tag(name:"creation_date", value:"2016-05-09 14:24:47 +0300 (Mon, 09 May 2016)");
script_tag(name:"last_modification", value:"$Date: 2019-03-14 13:29:16 +0100 (Thu, 14 Mar 2019) $");
script_name("Oracle Linux Local Check: ELSA-2016-0706");
script_tag(name:"insight", value:"ELSA-2016-0706 - mercurial security update. Please see the references for more insight.");
script_tag(name:"solution", value:"Update the affected packages to the latest available version.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"summary", value:"Oracle Linux Local Security Checks ELSA-2016-0706");
script_xref(name:"URL", value:"http://linux.oracle.com/errata/ELSA-2016-0706.html");
script_cve_id("CVE-2016-3068", "CVE-2016-3069");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_tag(name:"qod_type", value:"package");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/oracle_linux", "ssh/login/release", re:"ssh/login/release=OracleLinux7");
script_category(ACT_GATHER_INFO);
script_copyright("Eero Volotinen");
script_family("Oracle Linux Local Security Checks");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release) exit(0);
res = "";
if(release == "OracleLinux7")
{
if ((res = isrpmvuln(pkg:"emacs-mercurial", rpm:"emacs-mercurial~2.6.2~6.el7_2", rls:"OracleLinux7")) != NULL) {
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"emacs-mercurial-el", rpm:"emacs-mercurial-el~2.6.2~6.el7_2", rls:"OracleLinux7")) != NULL) {
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"mercurial", rpm:"mercurial~2.6.2~6.el7_2", rls:"OracleLinux7")) != NULL) {
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"mercurial-hgk", rpm:"mercurial-hgk~2.6.2~6.el7_2", rls:"OracleLinux7")) != NULL) {
security_message(data:res);
exit(0);
}
}
if (__pkg_match) exit(99);
exit(0);
{"id": "OPENVAS:1361412562310122930", "type": "openvas", "bulletinFamily": "scanner", "title": "Oracle Linux Local Check: ELSA-2016-0706", "description": "Oracle Linux Local Security Checks ELSA-2016-0706", "published": "2016-05-09T00:00:00", "modified": "2019-03-14T00:00:00", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122930", "reporter": "Eero Volotinen", "references": ["http://linux.oracle.com/errata/ELSA-2016-0706.html"], "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "lastseen": "2019-05-29T18:35:22", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2016-3069", "CVE-2016-3068"]}, {"type": "oraclelinux", "idList": ["ELSA-2016-0706"]}, {"type": "centos", "idList": ["CESA-2016:0706"]}, {"type": "redhat", "idList": ["RHSA-2016:0706"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310851272", "OPENVAS:1361412562310120686", "OPENVAS:1361412562311220161019", "OPENVAS:1361412562310882481", "OPENVAS:1361412562310851278", "OPENVAS:1361412562310871605", "OPENVAS:1361412562310703542", "OPENVAS:1361412562310131308", "OPENVAS:703542", "OPENVAS:1361412562310807917"]}, {"type": "nessus", "idList": ["CENTOS_RHSA-2016-0706.NASL", "FREEBSD_PKG_E1085B15F60911E5A2300014A5A57822.NASL", "REDHAT-RHSA-2016-0706.NASL", "ALA_ALAS-2016-697.NASL", "PHOTONOS_PHSA-2016-0011_MERCURIAL.NASL", "EULEROS_SA-2016-1019.NASL", "ORACLELINUX_ELSA-2016-0706.NASL", "OPENSUSE-2016-452.NASL", "SL_20160502_MERCURIAL_ON_SL7_X.NASL", "SLACKWARE_SSA_2016-092-01.NASL"]}, {"type": "fedora", "idList": ["FEDORA:CB9C960C37E7", "FEDORA:BE82261B2D5C", "FEDORA:8EC36620C68C"]}, {"type": "suse", "idList": ["SUSE-SU-2016:1010-1", "SUSE-SU-2016:1011-1", "OPENSUSE-SU-2016:1016-1", "OPENSUSE-SU-2016:1073-1"]}, {"type": "debian", "idList": ["DEBIAN:DSA-3542-1:9AF5E"]}, {"type": "freebsd", "idList": ["E1085B15-F609-11E5-A230-0014A5A57822"]}, {"type": "amazon", "idList": ["ALAS-2016-697"]}, {"type": "slackware", "idList": ["SSA-2016-092-01"]}, {"type": "archlinux", "idList": ["ASA-201604-6"]}, {"type": "gentoo", "idList": ["GLSA-201612-19"]}], "modified": "2019-05-29T18:35:22", "rev": 2}, "score": {"value": 6.1, "vector": "NONE", "modified": "2019-05-29T18:35:22", "rev": 2}, "vulnersScore": 6.1}, "pluginID": "1361412562310122930", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: ELSA-2016-0706.nasl 14180 2019-03-14 12:29:16Z cfischer $\n#\n# Oracle Linux Local Check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.fi>\n#\n# Copyright:\n# Copyright (c) 2016 Eero Volotinen, http://solinor.fi\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.122930\");\n script_version(\"$Revision: 14180 $\");\n script_tag(name:\"creation_date\", value:\"2016-05-09 14:24:47 +0300 (Mon, 09 May 2016)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-14 13:29:16 +0100 (Thu, 14 Mar 2019) $\");\n script_name(\"Oracle Linux Local Check: ELSA-2016-0706\");\n script_tag(name:\"insight\", value:\"ELSA-2016-0706 - mercurial security update. Please see the references for more insight.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"summary\", value:\"Oracle Linux Local Security Checks ELSA-2016-0706\");\n script_xref(name:\"URL\", value:\"http://linux.oracle.com/errata/ELSA-2016-0706.html\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\", re:\"ssh/login/release=OracleLinux7\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Eero Volotinen\");\n script_family(\"Oracle Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"OracleLinux7\")\n{\n if ((res = isrpmvuln(pkg:\"emacs-mercurial\", rpm:\"emacs-mercurial~2.6.2~6.el7_2\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"emacs-mercurial-el\", rpm:\"emacs-mercurial-el~2.6.2~6.el7_2\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~2.6.2~6.el7_2\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"mercurial-hgk\", rpm:\"mercurial-hgk~2.6.2~6.el7_2\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n\n}\nif (__pkg_match) exit(99);\n exit(0);\n\n", "naslFamily": "Oracle Linux Local Security Checks"}
{"cve": [{"lastseen": "2020-12-09T20:07:37", "description": "Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.", "edition": 5, "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2016-04-13T16:59:00", "title": "CVE-2016-3068", "type": "cve", "cwe": ["CWE-20"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-3068"], "modified": "2018-10-30T16:27:00", "cpe": ["cpe:/o:debian:debian_linux:8.0", "cpe:/o:redhat:enterprise_linux_server:7.0", "cpe:/a:suse:linux_enterprise_debuginfo:11", "cpe:/o:suse:linux_enterprise_software_development_kit:11", "cpe:/o:suse:linux_enterprise_software_development_kit:12", "cpe:/o:opensuse:opensuse:13.2", "cpe:/o:opensuse:leap:42.1", "cpe:/o:redhat:enterprise_linux_workstation:7.0", "cpe:/o:redhat:enterprise_linux_hpc_node:7.0", "cpe:/o:redhat:enterprise_linux_server_aus:7.2", "cpe:/o:debian:debian_linux:7.0", "cpe:/o:redhat:enterprise_linux_desktop:7.0", "cpe:/o:fedoraproject:fedora:22", "cpe:/o:redhat:enterprise_linux_server_eus:7.2", "cpe:/o:redhat:enterprise_linux_hpc_node_eus:7.2", "cpe:/o:fedoraproject:fedora:23", "cpe:/a:mercurial:mercurial:3.7.2"], "id": "CVE-2016-3068", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3068", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "cpe:2.3:a:mercurial:mercurial:3.7.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"]}, {"lastseen": "2020-12-09T20:07:37", "description": "Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.", "edition": 5, "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2016-04-13T16:59:00", "title": "CVE-2016-3069", "type": "cve", "cwe": ["CWE-20"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-3069"], "modified": "2018-10-30T16:27:00", "cpe": ["cpe:/o:debian:debian_linux:8.0", "cpe:/o:redhat:enterprise_linux_server:7.0", "cpe:/a:suse:linux_enterprise_debuginfo:11", "cpe:/o:suse:linux_enterprise_software_development_kit:11", "cpe:/o:suse:linux_enterprise_software_development_kit:12", "cpe:/o:opensuse:opensuse:13.2", "cpe:/o:opensuse:leap:42.1", "cpe:/o:redhat:enterprise_linux_workstation:7.0", "cpe:/o:redhat:enterprise_linux_hpc_node:7.0", "cpe:/o:redhat:enterprise_linux_server_aus:7.2", "cpe:/o:debian:debian_linux:7.0", "cpe:/o:redhat:enterprise_linux_desktop:7.0", "cpe:/o:fedoraproject:fedora:22", "cpe:/o:redhat:enterprise_linux_server_eus:7.2", "cpe:/o:redhat:enterprise_linux_hpc_node_eus:7.2", "cpe:/o:fedoraproject:fedora:23", "cpe:/a:mercurial:mercurial:3.7.2"], "id": "CVE-2016-3069", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3069", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "cpe:2.3:a:mercurial:mercurial:3.7.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"]}], "oraclelinux": [{"lastseen": "2019-05-29T18:36:43", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "description": "[2.6.2-6]\n- fix previous patch for CVE-2016-3069\n[2.6.2-5]\n- Fix CVE-2016-3068 and CVE-2016-3069", "edition": 4, "modified": "2016-05-02T00:00:00", "published": "2016-05-02T00:00:00", "id": "ELSA-2016-0706", "href": "http://linux.oracle.com/errata/ELSA-2016-0706.html", "title": "mercurial security update", "type": "oraclelinux", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "centos": [{"lastseen": "2019-12-20T18:26:32", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "description": "**CentOS Errata and Security Advisory** CESA-2016:0706\n\n\nMercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects.\n\nSecurity Fix(es):\n\n* It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2016-May/033893.html\n\n**Affected packages:**\nemacs-mercurial\nemacs-mercurial-el\nmercurial\nmercurial-hgk\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2016-0706.html", "edition": 3, "modified": "2016-05-02T15:13:40", "published": "2016-05-02T15:13:40", "href": "http://lists.centos.org/pipermail/centos-announce/2016-May/033893.html", "id": "CESA-2016:0706", "title": "emacs, mercurial security update", "type": "centos", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "redhat": [{"lastseen": "2019-08-13T18:46:38", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "description": "Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects.\n\nSecurity Fix(es):\n\n* It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.", "modified": "2018-04-12T03:33:04", "published": "2016-05-02T16:16:03", "id": "RHSA-2016:0706", "href": "https://access.redhat.com/errata/RHSA-2016:0706", "type": "redhat", "title": "(RHSA-2016:0706) Important: mercurial security update", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2021-01-17T13:49:14", "description": "Security Fix(es) :\n\n - It was discovered that Mercurial failed to properly\n check Git sub- repository URLs. A Mercurial repository\n that includes a Git sub-repository with a specially\n crafted URL could cause Mercurial to execute arbitrary\n code. (CVE-2016-3068)\n\n - It was discovered that the Mercurial convert extension\n failed to sanitize special characters in Git repository\n names. A Git repository with a specially crafted name\n could cause Mercurial to execute arbitrary code when the\n Git repository was converted to a Mercurial repository.\n (CVE-2016-3069)", "edition": 15, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-05-03T00:00:00", "title": "Scientific Linux Security Update : mercurial on SL7.x x86_64 (20160502)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "modified": "2016-05-03T00:00:00", "cpe": ["p-cpe:/a:fermilab:scientific_linux:mercurial", "p-cpe:/a:fermilab:scientific_linux:emacs-mercurial", "p-cpe:/a:fermilab:scientific_linux:mercurial-hgk", "p-cpe:/a:fermilab:scientific_linux:emacs-mercurial-el", "x-cpe:/o:fermilab:scientific_linux", "p-cpe:/a:fermilab:scientific_linux:mercurial-debuginfo"], "id": "SL_20160502_MERCURIAL_ON_SL7_X.NASL", "href": "https://www.tenable.com/plugins/nessus/90854", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90854);\n script_version(\"2.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n\n script_name(english:\"Scientific Linux Security Update : mercurial on SL7.x x86_64 (20160502)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security Fix(es) :\n\n - It was discovered that Mercurial failed to properly\n check Git sub- repository URLs. A Mercurial repository\n that includes a Git sub-repository with a specially\n crafted URL could cause Mercurial to execute arbitrary\n code. (CVE-2016-3068)\n\n - It was discovered that the Mercurial convert extension\n failed to sanitize special characters in Git repository\n names. A Git repository with a specially crafted name\n could cause Mercurial to execute arbitrary code when the\n Git repository was converted to a Mercurial repository.\n (CVE-2016-3069)\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1605&L=scientific-linux-errata&F=&S=&P=74\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9957cbe1\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:emacs-mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:emacs-mercurial-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:mercurial-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:mercurial-hgk\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/04/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/05/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/05/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nos_ver = pregmatch(pattern: \"Scientific Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Scientific Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Scientific Linux 7.x\", \"Scientific Linux \" + os_ver);\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"emacs-mercurial-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"emacs-mercurial-el-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"mercurial-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"mercurial-debuginfo-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"mercurial-hgk-2.6.2-6.el7_2\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"emacs-mercurial / emacs-mercurial-el / mercurial / etc\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-17T12:50:38", "description": "From Red Hat Security Advisory 2016:0706 :\n\nAn update for mercurial is now available for Red Hat Enterprise Linux\n7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Important. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nMercurial is a fast, lightweight source control management system\ndesigned for efficient handling of very large distributed projects.\n\nSecurity Fix(es) :\n\n* It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to\nsanitize special characters in Git repository names. A Git repository\nwith a specially crafted name could cause Mercurial to execute\narbitrary code when the Git repository was converted to a Mercurial\nrepository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.", "edition": 26, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-05-03T00:00:00", "title": "Oracle Linux 7 : mercurial (ELSA-2016-0706)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "modified": "2016-05-03T00:00:00", "cpe": ["p-cpe:/a:oracle:linux:emacs-mercurial", "p-cpe:/a:oracle:linux:emacs-mercurial-el", "p-cpe:/a:oracle:linux:mercurial-hgk", "p-cpe:/a:oracle:linux:mercurial", "cpe:/o:oracle:linux:7"], "id": "ORACLELINUX_ELSA-2016-0706.NASL", "href": "https://www.tenable.com/plugins/nessus/90850", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2016:0706 and \n# Oracle Linux Security Advisory ELSA-2016-0706 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90850);\n script_version(\"2.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_xref(name:\"RHSA\", value:\"2016:0706\");\n\n script_name(english:\"Oracle Linux 7 : mercurial (ELSA-2016-0706)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2016:0706 :\n\nAn update for mercurial is now available for Red Hat Enterprise Linux\n7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Important. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nMercurial is a fast, lightweight source control management system\ndesigned for efficient handling of very large distributed projects.\n\nSecurity Fix(es) :\n\n* It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to\nsanitize special characters in Git repository names. A Git repository\nwith a specially crafted name could cause Mercurial to execute\narbitrary code when the Git repository was converted to a Mercurial\nrepository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2016-May/005992.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:emacs-mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:emacs-mercurial-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:mercurial-hgk\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/04/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/05/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/05/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 7\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"emacs-mercurial-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"emacs-mercurial-el-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"mercurial-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"mercurial-hgk-2.6.2-6.el7_2\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"emacs-mercurial / emacs-mercurial-el / mercurial / mercurial-hgk\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-06T09:30:36", "description": "An update for mercurial is now available for Red Hat Enterprise Linux\n7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Important. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nMercurial is a fast, lightweight source control management system\ndesigned for efficient handling of very large distributed projects.\n\nSecurity Fix(es) :\n\n* It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to\nsanitize special characters in Git repository names. A Git repository\nwith a specially crafted name could cause Mercurial to execute\narbitrary code when the Git repository was converted to a Mercurial\nrepository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.", "edition": 30, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-05-03T00:00:00", "title": "CentOS 7 : mercurial (CESA-2016:0706)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "modified": "2016-05-03T00:00:00", "cpe": ["p-cpe:/a:centos:centos:mercurial-hgk", "cpe:/o:centos:centos:7", "p-cpe:/a:centos:centos:emacs-mercurial", "p-cpe:/a:centos:centos:mercurial", "p-cpe:/a:centos:centos:emacs-mercurial-el"], "id": "CENTOS_RHSA-2016-0706.NASL", "href": "https://www.tenable.com/plugins/nessus/90837", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2016:0706 and \n# CentOS Errata and Security Advisory 2016:0706 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90837);\n script_version(\"2.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_xref(name:\"RHSA\", value:\"2016:0706\");\n\n script_name(english:\"CentOS 7 : mercurial (CESA-2016:0706)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update for mercurial is now available for Red Hat Enterprise Linux\n7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Important. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nMercurial is a fast, lightweight source control management system\ndesigned for efficient handling of very large distributed projects.\n\nSecurity Fix(es) :\n\n* It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to\nsanitize special characters in Git repository names. A Git repository\nwith a specially crafted name could cause Mercurial to execute\narbitrary code when the Git repository was converted to a Mercurial\nrepository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2016-May/021855.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?7fa341a3\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-3068\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:emacs-mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:emacs-mercurial-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:mercurial-hgk\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/04/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/05/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/05/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 7.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"emacs-mercurial-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"emacs-mercurial-el-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"mercurial-2.6.2-6.el7_2\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"mercurial-hgk-2.6.2-6.el7_2\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"emacs-mercurial / emacs-mercurial-el / mercurial / mercurial-hgk\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-01T05:06:22", "description": "An update for mercurial is now available for Red Hat Enterprise Linux\n7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Important. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nMercurial is a fast, lightweight source control management system\ndesigned for efficient handling of very large distributed projects.\n\nSecurity Fix(es) :\n\n* It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to\nsanitize special characters in Git repository names. A Git repository\nwith a specially crafted name could cause Mercurial to execute\narbitrary code when the Git repository was converted to a Mercurial\nrepository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.", "edition": 28, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-05-03T00:00:00", "title": "RHEL 7 : mercurial (RHSA-2016:0706)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "modified": "2021-01-02T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:emacs-mercurial", "p-cpe:/a:redhat:enterprise_linux:emacs-mercurial-el", "cpe:/o:redhat:enterprise_linux:7.4", "cpe:/o:redhat:enterprise_linux:7.7", "cpe:/o:redhat:enterprise_linux:7.5", "cpe:/o:redhat:enterprise_linux:7", "cpe:/o:redhat:enterprise_linux:7.3", "p-cpe:/a:redhat:enterprise_linux:mercurial-hgk", "p-cpe:/a:redhat:enterprise_linux:mercurial-debuginfo", "cpe:/o:redhat:enterprise_linux:7.2", "cpe:/o:redhat:enterprise_linux:7.6", "p-cpe:/a:redhat:enterprise_linux:mercurial"], "id": "REDHAT-RHSA-2016-0706.NASL", "href": "https://www.tenable.com/plugins/nessus/90851", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2016:0706. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(90851);\n script_version(\"2.13\");\n script_cvs_date(\"Date: 2019/10/24 15:35:41\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_xref(name:\"RHSA\", value:\"2016:0706\");\n\n script_name(english:\"RHEL 7 : mercurial (RHSA-2016:0706)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update for mercurial is now available for Red Hat Enterprise Linux\n7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Important. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nMercurial is a fast, lightweight source control management system\ndesigned for efficient handling of very large distributed projects.\n\nSecurity Fix(es) :\n\n* It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n* It was discovered that the Mercurial convert extension failed to\nsanitize special characters in Git repository names. A Git repository\nwith a specially crafted name could cause Mercurial to execute\narbitrary code when the Git repository was converted to a Mercurial\nrepository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2016:0706\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-3068\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-3069\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:emacs-mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:emacs-mercurial-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:mercurial-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:mercurial-hgk\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.2\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/04/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/05/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/05/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 7.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2016:0706\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"emacs-mercurial-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"emacs-mercurial-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"emacs-mercurial-el-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"emacs-mercurial-el-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"mercurial-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"mercurial-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"mercurial-debuginfo-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"mercurial-debuginfo-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"mercurial-hgk-2.6.2-6.el7_2\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"mercurial-hgk-2.6.2-6.el7_2\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"emacs-mercurial / emacs-mercurial-el / mercurial / etc\");\n }\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T08:51:40", "description": "According to the versions of the mercurial package installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - It was discovered that Mercurial failed to properly\n check Git sub-repository URLs. A Mercurial repository\n that includes a Git sub-repository with a specially\n crafted URL could cause Mercurial to execute arbitrary\n code. (CVE-2016-3068)\n\n - It was discovered that the Mercurial convert extension\n failed to sanitize special characters in Git repository\n names. A Git repository with a specially crafted name\n could cause Mercurial to execute arbitrary code when\n the Git repository was converted to a Mercurial\n repository. (CVE-2016-3069)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 24, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2017-05-01T00:00:00", "title": "EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2016-1019)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "modified": "2017-05-01T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:mercurial", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2016-1019.NASL", "href": "https://www.tenable.com/plugins/nessus/99782", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(99782);\n script_version(\"1.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2016-3068\",\n \"CVE-2016-3069\"\n );\n\n script_name(english:\"EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2016-1019)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the mercurial package installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - It was discovered that Mercurial failed to properly\n check Git sub-repository URLs. A Mercurial repository\n that includes a Git sub-repository with a specially\n crafted URL could cause Mercurial to execute arbitrary\n code. (CVE-2016-3068)\n\n - It was discovered that the Mercurial convert extension\n failed to sanitize special characters in Git repository\n names. A Git repository with a specially crafted name\n could cause Mercurial to execute arbitrary code when\n the Git repository was converted to a Mercurial\n repository. (CVE-2016-3069)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2016-1019\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?5dc0f9e2\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected mercurial packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/05/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/05/01\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(1)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_ARCH_NOT, \"i686 / x86_64\", cpu);\n\nflag = 0;\n\npkgs = [\"mercurial-2.6.2-6\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"1\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \" mercurial\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T10:14:24", "description": "CVE-2016-3630, CVE-2016-3068, CVE-2016-3069\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 15, "published": "2016-04-22T00:00:00", "title": "Fedora 24 : mercurial-3.7.3-1.fc24 (2016-74f9a65b3a)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "modified": "2016-04-22T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:mercurial", "cpe:/o:fedoraproject:fedora:24"], "id": "FEDORA_2016-74F9A65B3A.NASL", "href": "https://www.tenable.com/plugins/nessus/90652", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2016-74f9a65b3a.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90652);\n script_version(\"2.3\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_xref(name:\"FEDORA\", value:\"2016-74f9a65b3a\");\n\n script_name(english:\"Fedora 24 : mercurial-3.7.3-1.fc24 (2016-74f9a65b3a)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"CVE-2016-3630, CVE-2016-3068, CVE-2016-3069\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2016-April/182833.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?b137d922\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial package.\"\n );\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:24\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/04/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/04/22\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^24([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 24.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC24\", reference:\"mercurial-3.7.3-1.fc24\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mercurial\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-06-05T11:12:58", "description": "mercurial was updated to fix three security issues.\n\nThese security issues were fixed :\n\n - CVE-2016-3069: Arbitrary code execution when converting\n Git repos (bsc#973176).\n\n - CVE-2016-3068: Arbitrary code execution with Git\n subrepos (bsc#973177).\n\n - CVE-2016-3630: Remote code execution in binary delta\n decoding (bsc#973175).", "edition": 17, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-04-18T00:00:00", "title": "openSUSE Security Update : mercurial (openSUSE-2016-467)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "modified": "2016-04-18T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:mercurial-debugsource", "p-cpe:/a:novell:opensuse:mercurial-debuginfo", "cpe:/o:novell:opensuse:42.1", "p-cpe:/a:novell:opensuse:mercurial", "p-cpe:/a:novell:opensuse:mercurial-lang"], "id": "OPENSUSE-2016-467.NASL", "href": "https://www.tenable.com/plugins/nessus/90559", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2016-467.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(90559);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2020/06/04\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n\n script_name(english:\"openSUSE Security Update : mercurial (openSUSE-2016-467)\");\n script_summary(english:\"Check for the openSUSE-2016-467 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"mercurial was updated to fix three security issues.\n\nThese security issues were fixed :\n\n - CVE-2016-3069: Arbitrary code execution when converting\n Git repos (bsc#973176).\n\n - CVE-2016-3068: Arbitrary code execution with Git\n subrepos (bsc#973177).\n\n - CVE-2016-3630: Remote code execution in binary delta\n decoding (bsc#973175).\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=973175\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=973176\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=973177\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:mercurial-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:mercurial-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:mercurial-lang\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/04/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/04/18\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2020 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE42\\.1)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"42.1\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE42.1\", reference:\"mercurial-3.5.1-3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"mercurial-debuginfo-3.5.1-3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"mercurial-debugsource-3.5.1-3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"mercurial-lang-3.5.1-3.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mercurial / mercurial-debuginfo / mercurial-debugsource / etc\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T10:14:43", "description": "Security fix for CVE-2016-3630, CVE-2016-3068, CVE-2016-3069 and minor\nupgrade\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 18, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-04-08T00:00:00", "title": "Fedora 23 : mercurial-3.5.2-1.fc23 (2016-b7f1f8e3bf)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "modified": "2016-04-08T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:mercurial", "cpe:/o:fedoraproject:fedora:23"], "id": "FEDORA_2016-B7F1F8E3BF.NASL", "href": "https://www.tenable.com/plugins/nessus/90416", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2016-b7f1f8e3bf.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90416);\n script_version(\"2.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_xref(name:\"FEDORA\", value:\"2016-b7f1f8e3bf\");\n\n script_name(english:\"Fedora 23 : mercurial-3.5.2-1.fc23 (2016-b7f1f8e3bf)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2016-3630, CVE-2016-3068, CVE-2016-3069 and minor\nupgrade\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1322264\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1322266\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1322267\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?c3faee0f\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:23\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/04/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/04/08\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^23([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 23.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC23\", reference:\"mercurial-3.5.2-1.fc23\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mercurial\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-17T09:10:52", "description": "New mercurial packages are available for Slackware 13.0, 13.1, 13.37,\n14.0, 14.1, and -current to fix security issues.", "edition": 24, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-04-05T00:00:00", "title": "Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : mercurial (SSA:2016-092-01)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "modified": "2016-04-05T00:00:00", "cpe": ["cpe:/o:slackware:slackware_linux:14.1", "cpe:/o:slackware:slackware_linux:13.37", "cpe:/o:slackware:slackware_linux:14.0", "cpe:/o:slackware:slackware_linux:13.0", "p-cpe:/a:slackware:slackware_linux:mercurial", "cpe:/o:slackware:slackware_linux", "cpe:/o:slackware:slackware_linux:13.1"], "id": "SLACKWARE_SSA_2016-092-01.NASL", "href": "https://www.tenable.com/plugins/nessus/90319", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2016-092-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90319);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_xref(name:\"SSA\", value:\"2016-092-01\");\n\n script_name(english:\"Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : mercurial (SSA:2016-092-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"New mercurial packages are available for Slackware 13.0, 13.1, 13.37,\n14.0, 14.1, and -current to fix security issues.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.527508\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?b558831e\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:13.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:13.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:13.37\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/04/01\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/04/05\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"13.0\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"i486\", pkgnum:\"1_slack13.0\")) flag++;\nif (slackware_check(osver:\"13.0\", arch:\"x86_64\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"x86_64\", pkgnum:\"1_slack13.0\")) flag++;\n\nif (slackware_check(osver:\"13.1\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"i486\", pkgnum:\"1_slack13.1\")) flag++;\nif (slackware_check(osver:\"13.1\", arch:\"x86_64\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"x86_64\", pkgnum:\"1_slack13.1\")) flag++;\n\nif (slackware_check(osver:\"13.37\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"i486\", pkgnum:\"1_slack13.37\")) flag++;\nif (slackware_check(osver:\"13.37\", arch:\"x86_64\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"x86_64\", pkgnum:\"1_slack13.37\")) flag++;\n\nif (slackware_check(osver:\"14.0\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"i486\", pkgnum:\"1_slack14.0\")) flag++;\nif (slackware_check(osver:\"14.0\", arch:\"x86_64\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.0\")) flag++;\n\nif (slackware_check(osver:\"14.1\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"i486\", pkgnum:\"1_slack14.1\")) flag++;\nif (slackware_check(osver:\"14.1\", arch:\"x86_64\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.1\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"i586\", pkgnum:\"1\")) flag++;\nif (slackware_check(osver:\"current\", arch:\"x86_64\", pkgname:\"mercurial\", pkgver:\"3.7.3\", pkgarch:\"x86_64\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:slackware_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T10:14:25", "description": "Security fix for CVE-2016-3630, CVE-2016-3068, CVE-2016-3069 and minor\nupgrade\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 18, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "published": "2016-04-08T00:00:00", "title": "Fedora 22 : mercurial-3.5.2-1.fc22 (2016-79604dde9f)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "modified": "2016-04-08T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:mercurial", "cpe:/o:fedoraproject:fedora:22"], "id": "FEDORA_2016-79604DDE9F.NASL", "href": "https://www.tenable.com/plugins/nessus/90414", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2016-79604dde9f.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(90414);\n script_version(\"2.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_xref(name:\"FEDORA\", value:\"2016-79604dde9f\");\n\n script_name(english:\"Fedora 22 : mercurial-3.5.2-1.fc22 (2016-79604dde9f)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2016-3630, CVE-2016-3068, CVE-2016-3069 and minor\nupgrade\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1322264\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1322266\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1322267\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?e925cafc\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mercurial package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mercurial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:22\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/04/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/04/08\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^22([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 22.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC22\", reference:\"mercurial-3.5.2-1.fc22\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mercurial\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2019-05-29T18:35:46", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "description": "Check the version of emacs-mercurial", "modified": "2019-03-08T00:00:00", "published": "2016-05-06T00:00:00", "id": "OPENVAS:1361412562310882481", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310882481", "type": "openvas", "title": "CentOS Update for emacs-mercurial CESA-2016:0706 centos7", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for emacs-mercurial CESA-2016:0706 centos7\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.882481\");\n script_version(\"$Revision: 14058 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-08 14:25:52 +0100 (Fri, 08 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2016-05-06 15:29:34 +0530 (Fri, 06 May 2016)\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"CentOS Update for emacs-mercurial CESA-2016:0706 centos7\");\n script_tag(name:\"summary\", value:\"Check the version of emacs-mercurial\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Mercurial is a fast, lightweight source\ncontrol management system designed for efficient handling of very large\ndistributed projects.\n\nSecurity Fix(es):\n\n * It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n * It was discovered that the Mercurial convert extension failed to sanitize\nspecial characters in Git repository names. A Git repository with a\nspecially crafted name could cause Mercurial to execute arbitrary code when\nthe Git repository was converted to a Mercurial repository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.\");\n script_tag(name:\"affected\", value:\"emacs-mercurial on CentOS 7\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"CESA\", value:\"2016:0706\");\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2016-May/021855.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS7\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"CentOS7\")\n{\n\n if ((res = isrpmvuln(pkg:\"emacs-mercurial\", rpm:\"emacs-mercurial~2.6.2~6.el7_2\", rls:\"CentOS7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"emacs-mercurial-el\", rpm:\"emacs-mercurial-el~2.6.2~6.el7_2\", rls:\"CentOS7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~2.6.2~6.el7_2\", rls:\"CentOS7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mercurial-hgk\", rpm:\"mercurial-hgk~2.6.2~6.el7_2\", rls:\"CentOS7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-27T18:33:53", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220161019", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220161019", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2016-1019)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2016.1019\");\n script_version(\"2020-01-23T10:38:18+0000\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 10:38:18 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 10:38:18 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2016-1019)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP1\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2016-1019\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2016-1019\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'mercurial' package(s) announced via the EulerOS-SA-2016-1019 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068)\n\nIt was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069)\");\n\n script_tag(name:\"affected\", value:\"'mercurial' package(s) on Huawei EulerOS V2.0SP1.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP1\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~2.6.2~6\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:34:59", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069"], "description": "The remote host is missing an update for the ", "modified": "2018-11-23T00:00:00", "published": "2016-05-06T00:00:00", "id": "OPENVAS:1361412562310871605", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310871605", "type": "openvas", "title": "RedHat Update for mercurial RHSA-2016:0706-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for mercurial RHSA-2016:0706-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.871605\");\n script_version(\"$Revision: 12497 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-23 09:28:21 +0100 (Fri, 23 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2016-05-06 15:29:19 +0530 (Fri, 06 May 2016)\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"RedHat Update for mercurial RHSA-2016:0706-01\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mercurial'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Mercurial is a fast, lightweight source\ncontrol management system designed for efficient handling of very large distributed\nprojects.\n\nSecurity Fix(es):\n\n * It was discovered that Mercurial failed to properly check Git\nsub-repository URLs. A Mercurial repository that includes a Git\nsub-repository with a specially crafted URL could cause Mercurial to\nexecute arbitrary code. (CVE-2016-3068)\n\n * It was discovered that the Mercurial convert extension failed to sanitize\nspecial characters in Git repository names. A Git repository with a\nspecially crafted name could cause Mercurial to execute arbitrary code when\nthe Git repository was converted to a Mercurial repository. (CVE-2016-3069)\n\nRed Hat would like to thank Blake Burkhart for reporting these issues.\");\n script_tag(name:\"affected\", value:\"mercurial on Red Hat Enterprise Linux Server (v. 7)\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"RHSA\", value:\"2016:0706-01\");\n script_xref(name:\"URL\", value:\"https://www.redhat.com/archives/rhsa-announce/2016-May/msg00002.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\", re:\"ssh/login/release=RHENT_7\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"RHENT_7\")\n{\n\n if ((res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~2.6.2~6.el7_2\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mercurial-debuginfo\", rpm:\"mercurial-debuginfo~2.6.2~6.el7_2\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-31T18:36:09", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "The remote host is missing an update for the ", "modified": "2020-01-31T00:00:00", "published": "2016-04-13T00:00:00", "id": "OPENVAS:1361412562310851272", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310851272", "type": "openvas", "title": "openSUSE: Security Advisory for mercurial (openSUSE-SU-2016:1016-1)", "sourceData": "# Copyright (C) 2016 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of their respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.851272\");\n script_version(\"2020-01-31T08:23:39+0000\");\n script_tag(name:\"last_modification\", value:\"2020-01-31 08:23:39 +0000 (Fri, 31 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2016-04-13 05:17:37 +0200 (Wed, 13 Apr 2016)\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"openSUSE: Security Advisory for mercurial (openSUSE-SU-2016:1016-1)\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mercurial'\n package(s) announced via the referenced advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"mercurial was updated to fix three security issues.\n\n These security issues were fixed:\n\n - CVE-2016-3069: Arbitrary code execution when converting Git repos\n (bsc#973176).\n\n - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177).\n\n - CVE-2016-3630: Remote code execution in binary delta decoding\n (bsc#973175).\");\n\n script_tag(name:\"affected\", value:\"mercurial on openSUSE 13.2\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"openSUSE-SU\", value:\"2016:1016-1\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=openSUSE13\\.2\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"openSUSE13.2\")\n{\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~3.1.2~7.1\", rls:\"openSUSE13.2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-debuginfo\", rpm:\"mercurial-debuginfo~3.1.2~7.1\", rls:\"openSUSE13.2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-debugsource\", rpm:\"mercurial-debugsource~3.1.2~7.1\", rls:\"openSUSE13.2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-lang\", rpm:\"mercurial-lang~3.1.2~7.1\", rls:\"openSUSE13.2\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if(__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-03-17T22:57:26", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "The remote host is missing an update announced via the referenced Security Advisory.", "modified": "2020-03-13T00:00:00", "published": "2016-05-09T00:00:00", "id": "OPENVAS:1361412562310120686", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310120686", "type": "openvas", "title": "Amazon Linux: Security Advisory (ALAS-2016-697)", "sourceData": "# Copyright (C) 2016 Eero Volotinen\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of their respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.120686\");\n script_version(\"2020-03-13T13:19:50+0000\");\n script_tag(name:\"creation_date\", value:\"2016-05-09 14:12:02 +0300 (Mon, 09 May 2016)\");\n script_tag(name:\"last_modification\", value:\"2020-03-13 13:19:50 +0000 (Fri, 13 Mar 2020)\");\n script_name(\"Amazon Linux: Security Advisory (ALAS-2016-697)\");\n script_tag(name:\"insight\", value:\"It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068 )The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. (CVE-2016-3630 )It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069 )\");\n script_tag(name:\"solution\", value:\"Run yum update mercurial to update your system.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://alas.aws.amazon.com/ALAS-2016-697.html\");\n script_cve_id(\"CVE-2016-3069\", \"CVE-2016-3068\", \"CVE-2016-3630\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/amazon_linux\", \"ssh/login/release\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"The remote host is missing an update announced via the referenced Security Advisory.\");\n script_copyright(\"Copyright (C) 2016 Eero Volotinen\");\n script_family(\"Amazon Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"AMAZON\") {\n if(!isnull(res = isrpmvuln(pkg:\"emacs-mercurial\", rpm:\"emacs-mercurial~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-python27\", rpm:\"mercurial-python27~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-common\", rpm:\"mercurial-common~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-python26\", rpm:\"mercurial-python26~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-debuginfo\", rpm:\"mercurial-debuginfo~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"emacs-mercurial-el\", rpm:\"emacs-mercurial-el~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~3.5.2~1.26.amzn1\", rls:\"AMAZON\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if(__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2017-07-24T12:54:08", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "Several vulnerabilities have been\n discovered in Mercurial, a distributed version control system. The Common\nVulnerabilities and Exposures project identifies the following issues:\n\nCVE-2016-3068 \nBlake Burkhart discovered that Mercurial allows URLs for Git\nsubrepositories that could result in arbitrary code execution on\nclone.\n\nCVE-2016-3069 \nBlake Burkhart discovered that Mercurial allows arbitrary code\nexecution when converting Git repositories with specially\ncrafted names.\n\nCVE-2016-3630 \nIt was discovered that Mercurial does not properly perform bounds-checking\nin its binary delta decoder, which may be exploitable for\nremote code execution via clone, push or pull.", "modified": "2017-07-07T00:00:00", "published": "2016-04-05T00:00:00", "id": "OPENVAS:703542", "href": "http://plugins.openvas.org/nasl.php?oid=703542", "type": "openvas", "title": "Debian Security Advisory DSA 3542-1 (mercurial - security update)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3542.nasl 6608 2017-07-07 12:05:05Z cfischer $\n# Auto-generated from advisory DSA 3542-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2016 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\n\nif(description)\n{\n script_id(703542);\n script_version(\"$Revision: 6608 $\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_name(\"Debian Security Advisory DSA 3542-1 (mercurial - security update)\");\n script_tag(name: \"last_modification\", value: \"$Date: 2017-07-07 14:05:05 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name: \"creation_date\", value: \"2016-04-05 00:00:00 +0200 (Tue, 05 Apr 2016)\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name: \"solution_type\", value: \"VendorFix\");\n script_tag(name: \"qod_type\", value: \"package\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2016/dsa-3542.html\");\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2016 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: \"mercurial on Debian Linux\");\n script_tag(name: \"insight\", value: \"Mercurial is a fast, lightweight Source\nControl Management system designed for efficient handling of very large distributed\nprojects.\n..\nIts features include:\n\n* O(1) delta-compressed file storage and retrieval scheme\n* Complete cross-indexing of files and changesets for efficient exploration\nof project history\n* Robust SHA1-based integrity checking and append-only storage model\n* Decentralized development model with arbitrary merging between trees\n* High-speed HTTP-based network merge protocol\n* Easy-to-use command-line interface\n* Integrated stand-alone web interface\n* Small Python codebase\");\n script_tag(name: \"solution\", value: \"For the oldstable distribution (wheezy),\nthese problems have been fixed in version 2.2.2-4+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 3.1.2-2+deb8u2.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 3.7.3-1.\n\nWe recommend that you upgrade your mercurial packages.\");\n script_tag(name: \"summary\", value: \"Several vulnerabilities have been\n discovered in Mercurial, a distributed version control system. The Common\nVulnerabilities and Exposures project identifies the following issues:\n\nCVE-2016-3068 \nBlake Burkhart discovered that Mercurial allows URLs for Git\nsubrepositories that could result in arbitrary code execution on\nclone.\n\nCVE-2016-3069 \nBlake Burkhart discovered that Mercurial allows arbitrary code\nexecution when converting Git repositories with specially\ncrafted names.\n\nCVE-2016-3630 \nIt was discovered that Mercurial does not properly perform bounds-checking\nin its binary delta decoder, which may be exploitable for\nremote code execution via clone, push or pull.\");\n script_tag(name: \"vuldetect\", value: \"This check tests the installed software\nversion using the apt package manager.\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"mercurial\", ver:\"3.1.2-2+deb8u2\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"mercurial-common\", ver:\"3.1.2-2+deb8u2\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"mercurial\", ver:\"2.2.2-4+deb7u2\", rls_regex:\"DEB7.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"mercurial-common\", ver:\"2.2.2-4+deb7u2\", rls_regex:\"DEB7.[0-9]+\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:34:55", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "Mageia Linux Local Security Checks mgasa-2016-0138", "modified": "2019-03-14T00:00:00", "published": "2016-05-09T00:00:00", "id": "OPENVAS:1361412562310131308", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310131308", "type": "openvas", "title": "Mageia Linux Local Check: mgasa-2016-0138", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: mgasa-2016-0138.nasl 14180 2019-03-14 12:29:16Z cfischer $\n#\n# Mageia Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2016 Eero Volotinen, http://www.solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.131308\");\n script_version(\"$Revision: 14180 $\");\n script_tag(name:\"creation_date\", value:\"2016-05-09 14:18:11 +0300 (Mon, 09 May 2016)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-14 13:29:16 +0100 (Thu, 14 Mar 2019) $\");\n script_name(\"Mageia Linux Local Check: mgasa-2016-0138\");\n script_tag(name:\"insight\", value:\"Updated mercurial packages fix security vulnerabilities: Blake Burkhart discovered that Mercurial allows URLs for Git subrepositories that could result in arbitrary code execution on clone (CVE-2016-3068). Blake Burkhart discovered that Mercurial allows arbitrary code execution when converting Git repositories with specially crafted names (CVE-2016-3069). It was discovered that Mercurial does not properly perform bounds-checking in its binary delta decoder, which may be exploitable for remote code execution via clone, push or pull (CVE-2016-3630).\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://advisories.mageia.org/MGASA-2016-0138.html\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mageia_linux\", \"ssh/login/release\", re:\"ssh/login/release=MAGEIA5\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Mageia Linux Local Security Checks mgasa-2016-0138\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Mageia Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MAGEIA5\")\n{\nif ((res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~3.1.1~5.1.mga5\", rls:\"MAGEIA5\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:35:25", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "Several vulnerabilities have been\n discovered in Mercurial, a distributed version control system. The Common\nVulnerabilities and Exposures project identifies the following issues:\n\nCVE-2016-3068\nBlake Burkhart discovered that Mercurial allows URLs for Git\nsubrepositories that could result in arbitrary code execution on\nclone.\n\nCVE-2016-3069\nBlake Burkhart discovered that Mercurial allows arbitrary code\nexecution when converting Git repositories with specially\ncrafted names.\n\nCVE-2016-3630\nIt was discovered that Mercurial does not properly perform bounds-checking\nin its binary delta decoder, which may be exploitable for\nremote code execution via clone, push or pull.", "modified": "2019-03-18T00:00:00", "published": "2016-04-05T00:00:00", "id": "OPENVAS:1361412562310703542", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310703542", "type": "openvas", "title": "Debian Security Advisory DSA 3542-1 (mercurial - security update)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3542.nasl 14279 2019-03-18 14:48:34Z cfischer $\n# Auto-generated from advisory DSA 3542-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2016 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.703542\");\n script_version(\"$Revision: 14279 $\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_name(\"Debian Security Advisory DSA 3542-1 (mercurial - security update)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:48:34 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2016-04-05 00:00:00 +0200 (Tue, 05 Apr 2016)\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"http://www.debian.org/security/2016/dsa-3542.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2016 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB(8|7)\");\n script_tag(name:\"affected\", value:\"mercurial on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the oldstable distribution (wheezy),\nthese problems have been fixed in version 2.2.2-4+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 3.1.2-2+deb8u2.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 3.7.3-1.\n\nWe recommend that you upgrade your mercurial packages.\");\n script_tag(name:\"summary\", value:\"Several vulnerabilities have been\n discovered in Mercurial, a distributed version control system. The Common\nVulnerabilities and Exposures project identifies the following issues:\n\nCVE-2016-3068\nBlake Burkhart discovered that Mercurial allows URLs for Git\nsubrepositories that could result in arbitrary code execution on\nclone.\n\nCVE-2016-3069\nBlake Burkhart discovered that Mercurial allows arbitrary code\nexecution when converting Git repositories with specially\ncrafted names.\n\nCVE-2016-3630\nIt was discovered that Mercurial does not properly perform bounds-checking\nin its binary delta decoder, which may be exploitable for\nremote code execution via clone, push or pull.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software\nversion using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"mercurial\", ver:\"3.1.2-2+deb8u2\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"mercurial-common\", ver:\"3.1.2-2+deb8u2\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"mercurial\", ver:\"2.2.2-4+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"mercurial-common\", ver:\"2.2.2-4+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-31T18:35:25", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "The remote host is missing an update for the ", "modified": "2020-01-31T00:00:00", "published": "2016-04-18T00:00:00", "id": "OPENVAS:1361412562310851278", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310851278", "type": "openvas", "title": "openSUSE: Security Advisory for mercurial (openSUSE-SU-2016:1073-1)", "sourceData": "# Copyright (C) 2016 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of their respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.851278\");\n script_version(\"2020-01-31T08:23:39+0000\");\n script_tag(name:\"last_modification\", value:\"2020-01-31 08:23:39 +0000 (Fri, 31 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2016-04-18 05:21:33 +0200 (Mon, 18 Apr 2016)\");\n script_cve_id(\"CVE-2016-3068\", \"CVE-2016-3069\", \"CVE-2016-3630\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"openSUSE: Security Advisory for mercurial (openSUSE-SU-2016:1073-1)\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mercurial'\n package(s) announced via the referenced advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"mercurial was updated to fix three security issues.\n\n These security issues were fixed:\n\n - CVE-2016-3069: Arbitrary code execution when converting Git repos\n (bsc#973176).\n\n - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177).\n\n - CVE-2016-3630: Remote code execution in binary delta decoding\n (bsc#973175).\");\n\n script_tag(name:\"affected\", value:\"mercurial on openSUSE Leap 42.1\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"openSUSE-SU\", value:\"2016:1073-1\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=openSUSELeap42\\.1\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"openSUSELeap42.1\") {\n if(!isnull(res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~3.5.1~3.1\", rls:\"openSUSELeap42.1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-debuginfo\", rpm:\"mercurial-debuginfo~3.5.1~3.1\", rls:\"openSUSELeap42.1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-debugsource\", rpm:\"mercurial-debugsource~3.5.1~3.1\", rls:\"openSUSELeap42.1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"mercurial-lang\", rpm:\"mercurial-lang~3.5.1~3.1\", rls:\"openSUSELeap42.1\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if(__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:35:38", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2016-04-21T00:00:00", "id": "OPENVAS:1361412562310807917", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310807917", "type": "openvas", "title": "Fedora Update for mercurial FEDORA-2016-74", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for mercurial FEDORA-2016-74\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.807917\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2016-04-21 05:18:13 +0200 (Thu, 21 Apr 2016)\");\n script_cve_id(\"CVE-2016-3630\", \"CVE-2016-3068\", \"CVE-2016-3069\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for mercurial FEDORA-2016-74\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mercurial'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"mercurial on Fedora 24\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2016-74\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/pipermail/package-announce/2016-April/182833.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC24\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC24\")\n{\n\n if ((res = isrpmvuln(pkg:\"mercurial\", rpm:\"mercurial~3.7.3~1.fc24\", rls:\"FC24\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "fedora": [{"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Quick start: http://www.selenic.com/mercurial/wiki/index.cgi/QuickStart Tutorial: http://www.selenic.com/mercurial/wiki/index.cgi/Tutorial Extensions: http://www.selenic.com/mercurial/wiki/index.cgi/CategoryExtensi on ", "modified": "2016-04-07T15:51:07", "published": "2016-04-07T15:51:07", "id": "FEDORA:CB9C960C37E7", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 22 Update: mercurial-3.5.2-1.fc22", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Quick start: http://www.selenic.com/mercurial/wiki/index.cgi/QuickStart Tutorial: http://www.selenic.com/mercurial/wiki/index.cgi/Tutorial Extensions: http://www.selenic.com/mercurial/wiki/index.cgi/CategoryExtensi on ", "modified": "2016-04-07T15:54:29", "published": "2016-04-07T15:54:29", "id": "FEDORA:BE82261B2D5C", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 23 Update: mercurial-3.5.2-1.fc23", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Quick start: http://www.selenic.com/mercurial/wiki/index.cgi/QuickStart Tutorial: http://www.selenic.com/mercurial/wiki/index.cgi/Tutorial Extensions: http://www.selenic.com/mercurial/wiki/index.cgi/CategoryExtensi on ", "modified": "2016-04-20T15:30:41", "published": "2016-04-20T15:30:41", "id": "FEDORA:8EC36620C68C", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 24 Update: mercurial-3.7.3-1.fc24", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "suse": [{"lastseen": "2016-09-04T11:56:37", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "mercurial was updated to fix three security issues.\n\n These security issues were fixed:\n - CVE-2016-3069: Arbitrary code execution when converting Git repos\n (bsc#973176).\n - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177).\n - CVE-2016-3630: Remote code execution in binary delta decoding\n (bsc#973175).\n\n", "edition": 1, "modified": "2016-04-12T14:08:19", "published": "2016-04-12T14:08:19", "id": "SUSE-SU-2016:1010-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html", "type": "suse", "title": "Security update for mercurial (important)", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:57:58", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "mercurial was updated to fix three security issues.\n\n These security issues were fixed:\n - CVE-2016-3069: Arbitrary code execution when converting Git repos\n (bsc#973176).\n - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177).\n - CVE-2016-3630: Remote code execution in binary delta decoding\n (bsc#973175).\n\n", "edition": 1, "modified": "2016-04-12T19:08:03", "published": "2016-04-12T19:08:03", "id": "OPENSUSE-SU-2016:1016-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00018.html", "type": "suse", "title": "Security update for mercurial (important)", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:41:29", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "mercurial was updated to fix three security issues.\n\n These security issues were fixed:\n - CVE-2016-3069: Arbitrary code execution when converting Git repos\n (bsc#973176).\n - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177).\n - CVE-2016-3630: Remote code execution in binary delta decoding\n (bsc#973175).\n\n", "edition": 1, "modified": "2016-04-17T17:11:39", "published": "2016-04-17T17:11:39", "id": "OPENSUSE-SU-2016:1073-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00043.html", "title": "Security update for mercurial (important)", "type": "suse", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T12:14:44", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "mercurial was updated to fix three security issues.\n\n These security issues were fixed:\n - CVE-2016-3069: Arbitrary code execution when converting Git repos\n (bsc#973176).\n - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177).\n - CVE-2016-3630: Remote code execution in binary delta decoding\n (bsc#973175).\n\n", "edition": 1, "modified": "2016-04-12T14:08:54", "published": "2016-04-12T14:08:54", "id": "SUSE-SU-2016:1011-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00017.html", "title": "Security update for mercurial (important)", "type": "suse", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "debian": [{"lastseen": "2020-08-12T01:10:16", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3542-1 security@debian.org\nhttps://www.debian.org/security/ Salvatore Bonaccorso\nApril 05, 2016 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : mercurial\nCVE ID : CVE-2016-3068 CVE-2016-3069 CVE-2016-3630\nDebian Bug : 819504\n\nSeveral vulnerabilities have been discovered in Mercurial, a distributed\nversion control system. The Common Vulnerabilities and Exposures project\nidentifies the following issues:\n\nCVE-2016-3068\n\n Blake Burkhart discovered that Mercurial allows URLs for Git\n subrepositories that could result in arbitrary code execution on\n clone.\n\nCVE-2016-3069\n\n Blake Burkhart discovered that Mercurial allows arbitrary code\n execution when converting Git repositories with specially\n crafted names.\n\nCVE-2016-3630\n\n It was discovered that Mercurial does not properly perform bounds-\n checking in its binary delta decoder, which may be exploitable for\n remote code execution via clone, push or pull.\n\nFor the oldstable distribution (wheezy), these problems have been fixed\nin version 2.2.2-4+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 3.1.2-2+deb8u2.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 3.7.3-1.\n\nWe recommend that you upgrade your mercurial packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "edition": 7, "modified": "2016-04-05T14:07:16", "published": "2016-04-05T14:07:16", "id": "DEBIAN:DSA-3542-1:9AF5E", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2016/msg00116.html", "title": "[SECURITY] [DSA 3542-1] mercurial security update", "type": "debian", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "freebsd": [{"lastseen": "2019-05-29T18:32:45", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "\nMercurial reports:\n\nCVE-2016-3630: Remote code execution in binary delta decoding\nCVE-2016-3068: Arbitrary code execution with Git subrepos\nCVE-2016-3069: Arbitrary code execution when converting\n\t Git repos\n\n", "edition": 4, "modified": "2016-03-29T00:00:00", "published": "2016-03-29T00:00:00", "id": "E1085B15-F609-11E5-A230-0014A5A57822", "href": "https://vuxml.freebsd.org/freebsd/e1085b15-f609-11e5-a230-0014a5a57822.html", "title": "mercurial -- multiple vulnerabilities", "type": "freebsd", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "amazon": [{"lastseen": "2020-11-10T12:37:01", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "**Issue Overview:**\n\nIt was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. ([CVE-2016-3068 __](<https://access.redhat.com/security/cve/CVE-2016-3068>))\n\nThe binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. ([CVE-2016-3630 __](<https://access.redhat.com/security/cve/CVE-2016-3630>))\n\nIt was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. ([CVE-2016-3069 __](<https://access.redhat.com/security/cve/CVE-2016-3069>))\n\n \n**Affected Packages:** \n\n\nmercurial\n\n \n**Issue Correction:** \nRun _yum update mercurial_ to update your system. \n\n\n \n\n\n**New Packages:**\n \n \n i686: \n emacs-mercurial-3.5.2-1.26.amzn1.i686 \n mercurial-python27-3.5.2-1.26.amzn1.i686 \n mercurial-common-3.5.2-1.26.amzn1.i686 \n mercurial-python26-3.5.2-1.26.amzn1.i686 \n mercurial-debuginfo-3.5.2-1.26.amzn1.i686 \n emacs-mercurial-el-3.5.2-1.26.amzn1.i686 \n \n src: \n mercurial-3.5.2-1.26.amzn1.src \n \n x86_64: \n mercurial-debuginfo-3.5.2-1.26.amzn1.x86_64 \n mercurial-common-3.5.2-1.26.amzn1.x86_64 \n mercurial-python27-3.5.2-1.26.amzn1.x86_64 \n emacs-mercurial-el-3.5.2-1.26.amzn1.x86_64 \n mercurial-python26-3.5.2-1.26.amzn1.x86_64 \n emacs-mercurial-3.5.2-1.26.amzn1.x86_64 \n \n \n", "edition": 3, "modified": "2016-05-03T10:30:00", "published": "2016-05-03T10:30:00", "id": "ALAS-2016-697", "href": "https://alas.aws.amazon.com/ALAS-2016-697.html", "title": "Important: mercurial", "type": "amazon", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "slackware": [{"lastseen": "2020-10-25T16:36:32", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630"], "description": "New mercurial packages are available for Slackware 13.0, 13.1, 13.37, 14.0,\n14.1, and -current to fix security issues.\n\n\nHere are the details from the Slackware 14.1 ChangeLog:\n\npatches/packages/mercurial-3.7.3-i486-1_slack14.1.txz: Upgraded.\n This update fixes security issues and bugs, including remote code execution\n in binary delta decoding, arbitrary code execution with Git subrepos, and\n arbitrary code execution when converting Git repos.\n For more information, see:\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3630\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3068\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3069\n (* Security fix *)\n\nWhere to find the new packages:\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\n\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\n\nUpdated package for Slackware 13.0:\nftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/mercurial-3.7.3-i486-1_slack13.0.txz\n\nUpdated package for Slackware x86_64 13.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/mercurial-3.7.3-x86_64-1_slack13.0.txz\n\nUpdated package for Slackware 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/mercurial-3.7.3-i486-1_slack13.1.txz\n\nUpdated package for Slackware x86_64 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/mercurial-3.7.3-x86_64-1_slack13.1.txz\n\nUpdated package for Slackware 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/mercurial-3.7.3-i486-1_slack13.37.txz\n\nUpdated package for Slackware x86_64 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/mercurial-3.7.3-x86_64-1_slack13.37.txz\n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/mercurial-3.7.3-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/mercurial-3.7.3-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/mercurial-3.7.3-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mercurial-3.7.3-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/mercurial-3.7.3-i586-1.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/d/mercurial-3.7.3-x86_64-1.txz\n\n\nMD5 signatures:\n\nSlackware 13.0 package:\nabac2d2f030f61bb537aa94f8c2867c7 mercurial-3.7.3-i486-1_slack13.0.txz\n\nSlackware x86_64 13.0 package:\nba5c1b02c8950368faecc6dbebd38c15 mercurial-3.7.3-x86_64-1_slack13.0.txz\n\nSlackware 13.1 package:\ne070f0cfa2407ed17658158b6ded0a0a mercurial-3.7.3-i486-1_slack13.1.txz\n\nSlackware x86_64 13.1 package:\nebe7c2002e33f1424bbbf13b1afac423 mercurial-3.7.3-x86_64-1_slack13.1.txz\n\nSlackware 13.37 package:\n0071725872205c1372b9b2757259119e mercurial-3.7.3-i486-1_slack13.37.txz\n\nSlackware x86_64 13.37 package:\ndd6ec649ffbb422792246ff5c4852b36 mercurial-3.7.3-x86_64-1_slack13.37.txz\n\nSlackware 14.0 package:\n9ae990351e4f5a052fc2a80cc1bc0121 mercurial-3.7.3-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\naa8bcc809464f7e12049c1a9a1a60930 mercurial-3.7.3-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\nb1a632a80f4992aac202e71860b2d9f2 mercurial-3.7.3-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\n952e91e8fb32f29befdf61961e7e074a mercurial-3.7.3-x86_64-1_slack14.1.txz\n\nSlackware -current package:\n8809859646562d14a39cb823c163bc12 d/mercurial-3.7.3-i586-1.txz\n\nSlackware x86_64 -current package:\nde8a58baf5db1a208b2b7bb9e4f1de01 d/mercurial-3.7.3-x86_64-1.txz\n\n\nInstallation instructions:\n\nUpgrade the package as root:\n > upgradepkg mercurial-3.7.3-i486-1_slack14.1.txz", "modified": "2016-04-01T21:39:16", "published": "2016-04-01T21:39:16", "id": "SSA-2016-092-01", "href": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.527508", "type": "slackware", "title": "[slackware-security] mercurial", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "archlinux": [{"lastseen": "2016-09-02T18:44:40", "bulletinFamily": "unix", "cvelist": ["CVE-2016-3068", "CVE-2016-3069", "CVE-2016-3630", "CVE-2015-7545"], "description": "- CVE-2016-3068 (arbitrary code execution)\n\nIt was reported that in mercurial, there is similar vulnerability as\nCVE-2015-7545 in git. Git's git-remote-ext remote helper provides an\next:: URL scheme that allows running arbitrary shell commands. Mercurial\nallows specifying git repositories as subrepositories. Git ext:: URLs\ncan be specified as Mercurial subrepositories allowing arbitrary shell\ncommands to be run on `hg clone`.\n\n- CVE-2016-3069 (arbitrary code execution)\n\nIt was reported that Convert extension in mercurial is vulnerable to\ncommand execution. Incorrect handling of command line parameters allows\npassing a full Git remote URL via a directory name. The Git ext:: URL\nscheme can be used to obtain arbitrary command execution. Furthermore,\nlack of escaping of shell metacharacters allows arbitrary command\ninjection, which is another way of exploiting the vulnerable code.\n\n- CVE-2016-3630 (arbitrary code execution)\n\nTwo bounds-checking errors have been discovered in the binary delta\ndecoder that may be exploitable via clone, push, or pull leading to\narbitrary code execution.", "modified": "2016-04-06T00:00:00", "published": "2016-04-06T00:00:00", "id": "ASA-201604-6", "href": "https://lists.archlinux.org/pipermail/arch-security/2016-April/000598.html", "type": "archlinux", "title": "mercurial: arbitrary code execution", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "gentoo": [{"lastseen": "2016-12-07T12:54:23", "bulletinFamily": "unix", "cvelist": ["CVE-2014-9462", "CVE-2016-3068", "CVE-2014-9390", "CVE-2016-3069", "CVE-2016-3630", "CVE-2016-3105"], "edition": 1, "description": "### Background\n\nMercurial is a distributed source control management system.\n\n### Description\n\nMultiple vulnerabilities have been discovered in Mercurial. Please review the CVE identifier and bug reports referenced for details. \n\n### Impact\n\nA remote attacker could possibly execute arbitrary code with the privileges of the process. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll mercurial users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=dev-vcs/mercurial-3.8.4\"", "modified": "2016-12-07T00:00:00", "published": "2016-12-07T00:00:00", "href": "https://security.gentoo.org/glsa/201612-19", "id": "GLSA-201612-19", "type": "gentoo", "title": "Mercurial: Multiple vulnerabilities", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}