Mercurial: Multiple vulnerabilities

Mercurial: Multiple vulnerabilities Multiple vulnerabilities have been found in Mercurial, the worst of which could lead to the remote execution of arbitrary code. mercurial 2017-09-24 2017-09-24 621068 627484 remote 4.3 4.3

Mercurial is a distributed source control management system.

Multiple vulnerabilities have been discovered in Mercurial. Please review the referenced CVE identifiers for details.

A remote attacker could possibly execute arbitrary code with the privileges of the process.

There is no known workaround at this time.

All Mercurial users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-vcs/mercurial-4.3"

CVE-2017-1000115 CVE-2017-1000116 CVE-2017-9462 chrisadr chrisadr