Описание
Security update for mercurial
This update for mercurial fixes the following issues:
Security issues fixed:
- CVE-2016-3105: Versionsprior to 3.8 allowed arbitrary code execution when using the convert extension on Git repo. (bsc#978391)
Список пакетов
SUSE Linux Enterprise Software Development Kit 11 SP4
mercurial-2.3.2-0.14.2
Ссылки
- Link for SUSE-SU-2016:1443-1
- E-Mail link for SUSE-SU-2016:1443-1
- SUSE Security Ratings
- SUSE Bug 978391
- SUSE CVE CVE-2016-3105 page
Описание
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 11 SP4:mercurial-2.3.2-0.14.2
Ссылки
- CVE-2016-3105
- SUSE Bug 978391