Ubuntu 16.04 ESM : Mercurial vulnerabilities (USN-5102-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5102-2 advisory. USN-5102-1 fixed vulnerabilities in Mercurial. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

CVE-2018-17983

CVE-2018-17983 is an out-of-bounds read in Mercurial’s manifest parsing. The flaw exists in cext/manifest.c in Mercurial prior to 4.7.2 and is triggered while parsing a malformed manifest entry. Public references in the connected documents align this issue with Mercurial vulnerability advisories ...

CVE-2018-17983: Out-of-bounds Read

cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry...