Описание
Security update for mercurial
This update for mercurial fixes the following issues:
Security issues fixed:
- CVE-2016-3105: Versionsprior to 3.8 allowed arbitrary code execution when using the convert extension on Git repo. (bsc#978391)
Список пакетов
SUSE Linux Enterprise Software Development Kit 12
mercurial-2.8.2-9.1
SUSE Linux Enterprise Software Development Kit 12 SP1
mercurial-2.8.2-9.1
Ссылки
- Link for SUSE-SU-2016:1442-1
- E-Mail link for SUSE-SU-2016:1442-1
- SUSE Security Ratings
- SUSE Bug 978391
- SUSE CVE CVE-2016-3105 page
Описание
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP1:mercurial-2.8.2-9.1
SUSE Linux Enterprise Software Development Kit 12:mercurial-2.8.2-9.1
Ссылки
- CVE-2016-3105
- SUSE Bug 978391