mercurial security update

2019-08-1300:00:00

linux.oracle.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

75.2%

JSON

[2.6.2-10]

Add missing hunk for CVE-2018-13347 patch
Related: CVE-2018-13347
[2.6.2-9]
Fix various CVEs
Resolves: CVE-2018-1000132 CVE-2018-13346 CVE-2018-13347

OSVersionArchitecturePackageVersionFilename
oracle linux7srcmercurial< 2.6.2-10.el7mercurial-2.6.2-10.el7.src.rpm
oracle linux7aarch64emacs-mercurial< 2.6.2-10.el7emacs-mercurial-2.6.2-10.el7.aarch64.rpm
oracle linux7aarch64emacs-mercurial-el< 2.6.2-10.el7emacs-mercurial-el-2.6.2-10.el7.aarch64.rpm
oracle linux7aarch64mercurial< 2.6.2-10.el7mercurial-2.6.2-10.el7.aarch64.rpm
oracle linux7aarch64mercurial-hgk< 2.6.2-10.el7mercurial-hgk-2.6.2-10.el7.aarch64.rpm
oracle linux7srcmercurial< 2.6.2-10.el7mercurial-2.6.2-10.el7.src.rpm
oracle linux7x86_64emacs-mercurial< 2.6.2-10.el7emacs-mercurial-2.6.2-10.el7.x86_64.rpm
oracle linux7x86_64emacs-mercurial-el< 2.6.2-10.el7emacs-mercurial-el-2.6.2-10.el7.x86_64.rpm
oracle linux7x86_64mercurial< 2.6.2-10.el7mercurial-2.6.2-10.el7.x86_64.rpm
oracle linux7x86_64mercurial-hgk< 2.6.2-10.el7mercurial-hgk-2.6.2-10.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	mercurial	< 2.6.2-10.el7	mercurial-2.6.2-10.el7.src.rpm
oracle linux	7	aarch64	emacs-mercurial	< 2.6.2-10.el7	emacs-mercurial-2.6.2-10.el7.aarch64.rpm
oracle linux	7	aarch64	emacs-mercurial-el	< 2.6.2-10.el7	emacs-mercurial-el-2.6.2-10.el7.aarch64.rpm
oracle linux	7	aarch64	mercurial	< 2.6.2-10.el7	mercurial-2.6.2-10.el7.aarch64.rpm
oracle linux	7	aarch64	mercurial-hgk	< 2.6.2-10.el7	mercurial-hgk-2.6.2-10.el7.aarch64.rpm
oracle linux	7	src	mercurial	< 2.6.2-10.el7	mercurial-2.6.2-10.el7.src.rpm
oracle linux	7	x86_64	emacs-mercurial	< 2.6.2-10.el7	emacs-mercurial-2.6.2-10.el7.x86_64.rpm
oracle linux	7	x86_64	emacs-mercurial-el	< 2.6.2-10.el7	emacs-mercurial-el-2.6.2-10.el7.x86_64.rpm
oracle linux	7	x86_64	mercurial	< 2.6.2-10.el7	mercurial-2.6.2-10.el7.x86_64.rpm
oracle linux	7	x86_64	mercurial-hgk	< 2.6.2-10.el7	mercurial-hgk-2.6.2-10.el7.x86_64.rpm