EUVD-2015-0029

Malware in sbrugna...

Mercurial sshpeer '_validaterepo' function arbitrary command execution vulnerability

Mercurial is a software developer Matt Mackall developed a set of cross-platform distributed version control software written in the Python language . The software supports the simultaneous processing of plain text and binary files and so on. A security vulnerability exists in the 'validaterepo'...

PT-2015-4225

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 3.2.4 Description The issue allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command. This is related to the validaterepo function in sshpeer. Recommendations For versio...