Be in love with vulnerability scanning
Mageni is a free and open-source vulnerability scanning and management platform used by companies of all sizes. You will be in love with Mageni's powerful features and ease of use. Mageni automates the vulnerability scanning process and saves you time, resources, and money. No registration or credit card is required.
Download Now
Debian LTS Advisory ([SECURITY] [DLA 1072-1] mercurial security update)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
Two significant vulnerabilities were found in the Mercurial version control system which could lead to shell injection attacks and out-of-tree file overwrite. CVE-2017-1000115 Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository. CVE-2017-1000116 Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks on clients by specifying a hostname starting with -oProxyCommand. This vulnerability is similar to those in Git (CVE-2017-1000117) and Subversion (CVE-2017-9800).
Affected Software
Affected Software
mercurial on Debian Linux
Detection Method
Detection Method
This check tests the installed software version using the apt package manager.
Solution
Solution
For Debian 7 'Wheezy', these problems have been fixed in version 2.2.2-4+deb7u5. We recommend that you upgrade your mercurial packages.
Common Vulnerabilities and Exposures (CVE)
Take the next step.
Take the next step and download Mageni Vulnerability Scanner
Mageni automates the vulnerability scanning process saving you time, resources, and money. No registration or credit card is required. It is free and always will be.
1. Download Multipass
2. Launch a multipass instance
3. Install Mageni
1. If you don’t have it already, install Brew. Then, to install Multipass simply execute:
2. Launch a multipass instance
2. Install Mageni
1. Download the installer for Windows
2. Ensure your network is private
3. Run the installer
4. Launch a multipass instance
5. Install Mageni