3 matches found
mercurial: arbitrary code execution
Mercurial prior to 3.8 allowed arbitrary code execution when using the convert extension on Git repos with hostile names. This could affect automated code conversion services that allow arbitrary repository names. This is a further side-effect of Git CVE-2015-7545. Reported and fixed by Blake...
DLA-459-1 mercurial - security update
Bulletin has no description...
DSA-3570-1 mercurial - security update
Bulletin has no description...