Lucene search

K
suseSuseOPENSUSE-SU-2018:2132-1
HistoryJul 28, 2018 - 4:04 p.m.

Security update for mercurial (moderate)

2018-07-2816:04:51
lists.opensuse.org
15

0.006 Low

EPSS

Percentile

75.1%

This update for mercurial fixes the following issues:

Security issues fixed:

  • CVE-2018-13346: Fix mpatch_apply function in mpatch.c that incorrectly
    proceeds in cases where the fragment start is past the end of the
    original data (bsc#1100354).
  • CVE-2018-13347: Fix mpatch.c that mishandles integer addition and
    subtraction (bsc#1100355).
  • CVE-2018-13348: Fix the mpatch_decode function in mpatch.c that
    mishandles certain situations where there should be at least 12 bytes
    remaining after thecurrent position in the patch data (bsc#1100353).

This update was imported from the SUSE:SLE-15:Update update project.