This update for mercurial fixes the following issues :

Security issues fixed :

  - CVE-2018-13346: Fix mpatch_apply function in mpatch.c     that incorrectly proceeds in cases where the fragment     start is past the end of the original data     (bsc#1100354).

  - CVE-2018-13347: Fix mpatch.c that mishandles integer     addition and subtraction (bsc#1100355).

  - CVE-2018-13348: Fix the mpatch_decode function in     mpatch.c that mishandles certain situations where there     should be at least 12 bytes remaining after thecurrent     position in the patch data (bsc#1100353).

This update was imported from the SUSE:SLE-15:Update update project.

According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute     arbitrary commands via a crafted repository name in a clone command. (CVE-2014-9462)

  - The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary     code via a crafted git repository name. (CVE-2016-3105)

  - The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a     (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short     records. (CVE-2016-3630)

  - The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there     should be at least 12 bytes remaining after the current position in the patch data, but actually are not,     aka OVE-20180430-0001. (CVE-2018-13348)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities were discovered in mercurial, an easy-to-use, scalable distributed version control system.

CVE-2017-17458

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository.
Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

CVE-2018-13346

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data.

CVE-2018-13347

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction.

CVE-2018-13348

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not.

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1.

CVE-2019-3902

Symbolic links and subrepositories could be used defeat Mercurial's path-checking logic and write files outside the repository root.

For Debian 9 stretch, these problems have been fixed in version 4.0-1+deb9u2.

We recommend that you upgrade your mercurial packages.

For the detailed security status of mercurial please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/mercurial

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for mercurial fixes the following issues :

Security issues fixed :

  - CVE-2018-13348: Fix the mpatch_decode function in     mpatch.c that mishandles certain situations where there     should be at least 12 bytes remaining after thecurrent     position in the patch data (boo#1100353).

  - CVE-2018-13347: Fix mpatch.c that mishandles integer     addition and subtraction (boo#1100355).

  - CVE-2018-13346: Fix the mpatch_apply function in     mpatch.c that incorrectly proceeds in cases where the     fragment start is past the end of the original data     (boo#1100354).

This update for mercurial fixes the following issues: Security issues fixed :

  - CVE-2018-13346: Fix mpatch_apply function in mpatch.c     that incorrectly proceeds in cases where the fragment     start is past the end of the original data     (bsc#1100354).

  - CVE-2018-13347: Fix mpatch.c that mishandles integer     addition and subtraction (bsc#1100355).

  - CVE-2018-13348: Fix the mpatch_decode function in     mpatch.c that mishandles certain situations where there     should be at least 12 bytes remaining after thecurrent     position in the patch data (bsc#1100353).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the mercurial package has been released.

ID	Name	Product	Family	Published	Updated	Severity
111424	openSUSE Security Update : mercurial (openSUSE-2018-772)	Nessus	SuSE Local Security Checks	7/30/2018	9/2/2024	critical
161516	EulerOS 2.0 SP3 : mercurial (EulerOS-SA-2022-1747)	Nessus	Huawei Local Security Checks	5/26/2022	10/26/2023	high
139244	Debian DLA-2293-1 : mercurial security update	Nessus	Debian Local Security Checks	8/3/2020	2/27/2024	critical
111192	openSUSE Security Update : mercurial (openSUSE-2018-734)	Nessus	SuSE Local Security Checks	7/20/2018	9/4/2024	critical
120055	SUSE SLED15 / SLES15 Security Update : mercurial (SUSE-SU-2018:1998-1)	Nessus	SuSE Local Security Checks	1/2/2019	7/11/2024	critical
203099	Photon OS 2.0: Mercurial PHSA-2019-2.0-0159	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	critical
123230	openSUSE Security Update : mercurial (openSUSE-2019-541)	Nessus	SuSE Local Security Checks	3/27/2019	6/11/2024	critical

Detections

Analytics

Plugins Search

critical

high

critical

critical

critical

critical

critical