SuSE: 2016:1010-1: important: mercurial
Summary
mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos (bsc#973176). - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177). - CVE-2016-3630: Remote code execution in binary delta decoding (bsc#973175). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-596=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2016-596=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): mercurial-2.8.2-6.1 mercurial-debuginfo-2.8.2-6.1 mercurial-debugsource-2.8.2-6.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): mercurial-2.8.2-6.1 mercurial-debuginfo-2.8.2-6.1 mercurial-debugsource-2.8.2-6.1
References
#973175 #973176 #973177
Cross- CVE-2016-3068 CVE-2016-3069 CVE-2016-3630
Affected Products:
SUSE Linux Enterprise Software Development Kit 12-SP1
SUSE Linux Enterprise Software Development Kit 12
https://www.suse.com/security/cve/CVE-2016-3068.html
https://www.suse.com/security/cve/CVE-2016-3069.html
https://www.suse.com/security/cve/CVE-2016-3630.html
https://bugzilla.suse.com/973175
https://bugzilla.suse.com/973176
https://bugzilla.suse.com/973177