Lucene search
RedHatRHSA-2016:0706HistoryMay 02, 2016 - 12:16 p.m.
(RHSA-2016:0706) Important: mercurial security update
2016-05-0212:16:03
access.redhat.com
12
EPSS
0.053
Percentile
93.1%
Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects.
Security Fix(es):
-
It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068)
-
It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069)
Red Hat would like to thank Blake Burkhart for reporting these issues.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | emacs-mercurial | < 2.6.2-6.el7_2 | emacs-mercurial-2.6.2-6.el7_2.x86_64.rpm |
| RedHat | 7 | s390x | mercurial | < 2.6.2-6.el7_2 | mercurial-2.6.2-6.el7_2.s390x.rpm |
| RedHat | 7 | s390x | emacs-mercurial | < 2.6.2-6.el7_2 | emacs-mercurial-2.6.2-6.el7_2.s390x.rpm |
| RedHat | 7 | s390x | emacs-mercurial-el | < 2.6.2-6.el7_2 | emacs-mercurial-el-2.6.2-6.el7_2.s390x.rpm |
| RedHat | 7 | ppc64 | mercurial-hgk | < 2.6.2-6.el7_2 | mercurial-hgk-2.6.2-6.el7_2.ppc64.rpm |
| RedHat | 7 | x86_64 | emacs-mercurial-el | < 2.6.2-6.el7_2 | emacs-mercurial-el-2.6.2-6.el7_2.x86_64.rpm |
| RedHat | 7 | x86_64 | mercurial-hgk | < 2.6.2-6.el7_2 | mercurial-hgk-2.6.2-6.el7_2.x86_64.rpm |
| RedHat | 7 | ppc64 | mercurial-debuginfo | < 2.6.2-6.el7_2 | mercurial-debuginfo-2.6.2-6.el7_2.ppc64.rpm |
| RedHat | 7 | ppc64le | mercurial | < 2.6.2-6.el7_2 | mercurial-2.6.2-6.el7_2.ppc64le.rpm |
| RedHat | 7 | x86_64 | mercurial | < 2.6.2-6.el7_2 | mercurial-2.6.2-6.el7_2.x86_64.rpm |
Related
openvas
openvas
RedHat Update for mercurial RHSA-2016:0706-01
2016-05-06 00:00:00
CentOS Update for emacs-mercurial CESA-2016:0706 centos7
2016-05-06 00:00:00
Oracle: Security Advisory (ELSA-2016-0706)
2016-05-09 00:00:00
nessus
nessus
Scientific Linux Security Update : mercurial on SL7.x x86_64 (20160502)
2016-05-03 00:00:00
RHEL 7 : mercurial (RHSA-2016:0706)
2016-05-03 00:00:00
EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2016-1019)
2017-05-01 00:00:00
oraclelinux
oraclelinux
mercurial security update
2016-05-02 00:00:00
centos
centos
emacs, mercurial security update
2016-05-02 15:13:40
mageia
mageia
Updated mercurial packages fix security vulnerabilities
2016-04-13 20:39:04
freebsd
freebsd
mercurial -- multiple vulnerabilities
2016-03-29 00:00:00
amazon
amazon
Important: mercurial
2016-05-03 10:30:00
slackware
slackware
[slackware-security] mercurial
2016-04-01 21:39:16
suse
suse
Security update for mercurial (important)
2016-04-12 14:08:54
Security update for mercurial (important)
2016-04-12 14:08:19
Security update for mercurial (important)
2016-04-17 17:11:39
osv
osv
mercurial - security update
2016-04-05 00:00:00
PYSEC-2016-26
2016-04-13 16:59:00
mercurial-4.0-1.1 on GA media
2024-06-15 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: mercurial-3.7.3-1.fc24
2016-04-20 15:30:41
[SECURITY] Fedora 22 Update: mercurial-3.5.2-1.fc22
2016-04-07 15:51:07
[SECURITY] Fedora 23 Update: mercurial-3.5.2-1.fc23
2016-04-07 15:54:29
debian
debian
[SECURITY] [DSA 3542-1] mercurial security update
2016-04-05 14:06:55
[SECURITY] [DSA 3542-1] mercurial security update
2016-04-05 14:06:55
archlinux
archlinux
mercurial: arbitrary code execution
2016-04-06 00:00:00
photon
photon
ubuntucve
ubuntucve
CVE-2016-3068
2016-04-13 00:00:00
CVE-2016-3069
2016-04-13 00:00:00
cvelist
cvelist
CVE-2016-3068
2016-04-13 16:00:00
CVE-2016-3069
2016-04-13 16:00:00
nvd
nvd
CVE-2016-3068
2016-04-13 16:59:16
CVE-2016-3069
2016-04-13 16:59:17
cve
cve
CVE-2016-3068
2016-04-13 16:59:16
CVE-2016-3069
2016-04-13 16:59:17
debiancve
debiancve
CVE-2016-3068
2016-04-13 16:59:16
CVE-2016-3069
2016-04-13 16:59:17
prion
prion
Code injection
2016-04-13 16:59:00
Code injection
2016-04-13 16:59:00
github
github
gentoo
gentoo
Mercurial: Multiple vulnerabilities
2016-12-07 00:00:00