blob: 25deef86161def5519aee6bc795c9664bf12d8d5 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
<define-tag description>LTS security update</define-tag>
<define-tag moreinfo>
<p>Blake Burkhart discovered an arbitrary code execution flaw in
Mercurial, a distributed version control system, when using the convert
extension on Git repositories with specially crafted names. This flaw in
particular affects automated code conversion services that allow
arbitrary repository names.</p>
<p>Patches are taken from the Jessie version.</p>
<p>For Debian 7 <q>Wheezy</q>, these issues have been fixed in mercurial version 2.2.2-4+deb7u3</p>
</define-tag>
# do not modify the following line
#include "$(ENGLISHDIR)/lts/security/2016/dla-459.data"
# $Id: $
|