Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Slackware 14.1 SSA: 2016-092-01 Critical: Mercurial Code Issues

slackware
Calendar Grey April 1, 2016
Dist Slackware Esm H88
Recent updates for mercurial packages have been issued for Slackware to address vulnerabilities including remote code execution risks and other security concerns across various versions.
New mercurial packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mercurial-3.7.3-i486-1_slack14.1.txz: Upgraded. This update fixes security issues and bugs, including remote code execution in binary delta decoding, arbitrary code execution with Git subrepos, and arbitrary code execution when converting Git repos. For more information, see: https://www.cve.org/CVERecord?id=CVE-2016-3630 https://www.cve.org/CVERecord?id=CVE-2016-3068 https://www.cve.org/CVERecord?id=CVE-2016-3069 (* Security fix *)

Topics%20covered

Topics Covered

security advisory remote code execution arbitrary code execution slackware mercurial update

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.0 package: abac2d2f030f61bb537aa94f8c2867c7 mercurial-3.7.3-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: ba5c1b02c8950368faecc6dbebd38c15 mercurial-3.7.3-x86_64-1_slack13.0.txz
Slackware 13.1 package: e070f0cfa2407ed17658158b6ded0a0a mercurial-3.7.3-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: ebe7c2002e33f1424bbbf13b1afac423 mercurial-3.7.3-x86_64-1_slack13.1.txz
Slackware 13.37 package: 0071725872205c1372b9b2757259119e mercurial-3.7.3-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: dd6ec649ffbb422792246ff5c4852b36 mercurial-3.7.3-x86_64-1_slack13.37.txz
Slackware 14.0 package: 9ae990351e4f5a052fc2a80cc1bc0121 mercurial-3.7.3-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: aa8bcc809464f7e12049c1a9a1a60930 mercurial-3.7.3-x86_64-1_slack14.0.txz
Slackware 14.1 package: b1a632a80f4992aac202e71860b2d9f2 mercurial-3.7.3-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 952e91e8fb32f29befdf61961e7e074a mercurial-3.7.3-x86_64-1_slack14.1.txz
Slackware -current package: 8809859646562d14a39cb823c163bc12 d/mercurial-3.7.3-i586-1.txz
Slackware x86_64 -current package: de8a58baf5db1a208b2b7bb9e4f1de01 d/mercurial-3.7.3-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory remote code execution arbitrary code execution slackware mercurial update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg mercurial-3.7.3-i486-1_slack14.1.txz

Related News

Your message here