Security update for mercurial (important)

2017-06-1321:10:53

lists.opensuse.org

0.03 Low

EPSS

Percentile

91.0%

JSON

This update for mercurial fixes the following issues:

CVE-2017-9462: Arbitrary code execution was possible by remote users via
"hg serve --stdio" (bsc#1043063):

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Debuginfo11.4i586mercurial-debuginfo< 2.3.2-0.17.1mercurial-debuginfo-2.3.2-0.17.1.i586.rpm
SUSE Linux Enterprise Debuginfo11.4i586mercurial-debugsource< 2.3.2-0.17.1mercurial-debugsource-2.3.2-0.17.1.i586.rpm
SUSE Linux Enterprise Software Development Kit11.4i586mercurial< 2.3.2-0.17.1mercurial-2.3.2-0.17.1.i586.rpm
SUSE Linux Enterprise Software Development Kit11.4x86_64mercurial< 2.3.2-0.17.1mercurial-2.3.2-0.17.1.x86_64.rpm
SUSE Linux Enterprise Debuginfo11.4s390xmercurial-debugsource< 2.3.2-0.17.1mercurial-debugsource-2.3.2-0.17.1.s390x.rpm
SUSE Linux Enterprise Debuginfo11.4x86_64mercurial-debuginfo< 2.3.2-0.17.1mercurial-debuginfo-2.3.2-0.17.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit11.4ia64mercurial< 2.3.2-0.17.1mercurial-2.3.2-0.17.1.ia64.rpm
SUSE Linux Enterprise Debuginfo11.4ppc64mercurial-debuginfo< 2.3.2-0.17.1mercurial-debuginfo-2.3.2-0.17.1.ppc64.rpm
SUSE Linux Enterprise Debuginfo11.4x86_64mercurial-debugsource< 2.3.2-0.17.1mercurial-debugsource-2.3.2-0.17.1.x86_64.rpm
SUSE Linux Enterprise Debuginfo11.4ia64mercurial-debuginfo< 2.3.2-0.17.1mercurial-debuginfo-2.3.2-0.17.1.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Debuginfo	11.4	i586	mercurial-debuginfo	< 2.3.2-0.17.1	mercurial-debuginfo-2.3.2-0.17.1.i586.rpm
SUSE Linux Enterprise Debuginfo	11.4	i586	mercurial-debugsource	< 2.3.2-0.17.1	mercurial-debugsource-2.3.2-0.17.1.i586.rpm
SUSE Linux Enterprise Software Development Kit	11.4	i586	mercurial	< 2.3.2-0.17.1	mercurial-2.3.2-0.17.1.i586.rpm
SUSE Linux Enterprise Software Development Kit	11.4	x86_64	mercurial	< 2.3.2-0.17.1	mercurial-2.3.2-0.17.1.x86_64.rpm
SUSE Linux Enterprise Debuginfo	11.4	s390x	mercurial-debugsource	< 2.3.2-0.17.1	mercurial-debugsource-2.3.2-0.17.1.s390x.rpm
SUSE Linux Enterprise Debuginfo	11.4	x86_64	mercurial-debuginfo	< 2.3.2-0.17.1	mercurial-debuginfo-2.3.2-0.17.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit	11.4	ia64	mercurial	< 2.3.2-0.17.1	mercurial-2.3.2-0.17.1.ia64.rpm
SUSE Linux Enterprise Debuginfo	11.4	ppc64	mercurial-debuginfo	< 2.3.2-0.17.1	mercurial-debuginfo-2.3.2-0.17.1.ppc64.rpm
SUSE Linux Enterprise Debuginfo	11.4	x86_64	mercurial-debugsource	< 2.3.2-0.17.1	mercurial-debugsource-2.3.2-0.17.1.x86_64.rpm
SUSE Linux Enterprise Debuginfo	11.4	ia64	mercurial-debuginfo	< 2.3.2-0.17.1	mercurial-debuginfo-2.3.2-0.17.1.ia64.rpm