SciLinux: SLSA-2017-1576-1 Important: mercurial on SL6.x, SL7.x i386/x86_64
Summary
Important: mercurial security update
Security Fixes
handled command-line options. A remote, authenticated attacker could use
this flaw to execute arbitrary code on the Mercurial server by using
specially crafted command-line options. (CVE-2017-9462)
SL6
x86_64
emacs-mercurial-1.4-5.el6_9.x86_64.rpm
emacs-mercurial-el-1.4-5.el6_9.x86_64.rpm
mercurial-1.4-5.el6_9.x86_64.rpm
mercurial-debuginfo-1.4-5.el6_9.x86_64.rpm
mercurial-hgk-1.4-5.el6_9.x86_64.rpm
i386
emacs-mercurial-1.4-5.el6_9.i686.rpm
emacs-mercurial-el-1.4-5.el6_9.i686.rpm
mercurial-1.4-5.el6_9.i686.rpm
mercurial-debuginfo-1.4-5.el6_9.i686.rpm
mercurial-hgk-1.4-5.el6_9.i686.rpm
SL7
x86_64
emacs-mercurial-2.6.2-7.el7_3.x86_64.rpm
emacs-mercurial-el-2.6.2-7.el7_3.x86_64.rpm
mercurial-2.6.2-7.el7_3.x86_64.rpm
mercurial-debuginfo-2.6.2-7.el7_3.x86_64.rpm
mercurial-hgk-2.6.2-7.el7_3.x86_64.rpm
- Scientific Linux Development Team