25 matches found
PYSEC-2016-26
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository...
UBUNTU-CVE-2016-3068
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository...
CVE-2016-3068
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository...
CVE-2016-3068
Mercurial before 3.7.3 is vulnerable to remote code execution via a crafted git ext:: URL when cloning a subrepository, enabling an attacker to run arbitrary code. Public advisories (ALAS-2016-697; CentOS/RH/Fedora updates) confirm this CVE-2016-3068 issue and indicate the fix is mercurial 3.7.3....
