An update of the mercurial package has been released.

Mercurial reports :

CVE-2016-3630: Remote code execution in binary delta decoding

CVE-2016-3068: Arbitrary code execution with Git subrepos

CVE-2016-3069: Arbitrary code execution when converting Git repos

An update for mercurial is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects.

Security Fix(es) :

* It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068)

* It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069)

Red Hat would like to thank Blake Burkhart for reporting these issues.

It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. (CVE-2016-3068)

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. (CVE-2016-3630)

It was discovered that the Mercurial convert extension failed to sanitize special characters in Git repository names. A Git repository with a specially crafted name could cause Mercurial to execute arbitrary code when the Git repository was converted to a Mercurial repository. (CVE-2016-3069)

New mercurial packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues.

Security Fix(es) :

  - It was discovered that Mercurial failed to properly     check Git sub- repository URLs. A Mercurial repository     that includes a Git sub-repository with a specially     crafted URL could cause Mercurial to execute arbitrary     code. (CVE-2016-3068)

  - It was discovered that the Mercurial convert extension     failed to sanitize special characters in Git repository     names. A Git repository with a specially crafted name     could cause Mercurial to execute arbitrary code when the     Git repository was converted to a Mercurial repository.
    (CVE-2016-3069)

mercurial was updated to fix three security issues.

These security issues were fixed :

  - CVE-2016-3069: Arbitrary code execution when converting     Git repos (bsc#973176).

  - CVE-2016-3068: Arbitrary code execution with Git     subrepos (bsc#973177).

  - CVE-2016-3630: Remote code execution in binary delta     decoding (bsc#973175).

The remote host is affected by the vulnerability described in GLSA-201612-19 (Mercurial: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mercurial. Please       review the CVE identifier and bug reports referenced for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
121646	Photon OS 1.0: Mercurial PHSA-2016-0011	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/23	high
90291	FreeBSD : mercurial -- multiple vulnerabilities (e1085b15-f609-11e5-a230-0014a5a57822)	Nessus	FreeBSD Local Security Checks	2016/4/1	2021/1/4	high
90837	CentOS 7 : mercurial (CESA-2016:0706)	Nessus	CentOS Local Security Checks	2016/5/3	2021/1/4	high
90866	Amazon Linux AMI : mercurial (ALAS-2016-697)	Nessus	Amazon Linux Local Security Checks	2016/5/4	2018/4/18	high
90319	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : mercurial (SSA:2016-092-01)	Nessus	Slackware Local Security Checks	2016/4/5	2021/1/14	high
90854	Scientific Linux Security Update : mercurial on SL7.x x86_64 (20160502)	Nessus	Scientific Linux Local Security Checks	2016/5/3	2021/1/14	high
90485	openSUSE Security Update : mercurial (openSUSE-2016-452)	Nessus	SuSE Local Security Checks	2016/4/13	2021/1/19	high
90851	RHEL 7 : mercurial (RHSA-2016:0706)	Nessus	Red Hat Local Security Checks	2016/5/3	2019/10/24	high
95605	GLSA-201612-19 : Mercurial: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/12/7	2026/1/15	critical
90559	openSUSE Security Update : mercurial (openSUSE-2016-467)	Nessus	SuSE Local Security Checks	2016/4/18	2021/1/19	high

检测

插件搜索

high

high

high

high

high

high

high

high

critical

high