[ GLSA 201612-19 ] Mercurial

[GLSA]

Gentoo Linux Security Advisory

Title: Mercurial: Multiple vulnerabilities (GLSA 201612-19)
Severity: normal
Exploitable: remote
Date: December 07, 2016
Bug(s): #533008, #544332, #578546, #582238
ID: 201612-19

Synopsis

Multiple vulnerabilities have been found in Mercurial, the worst of
which could lead to the remote execution of arbitrary code.


Background

Mercurial is a distributed source control management system.

Affected Packages

Package: dev-vcs/mercurial
Vulnerable: < 3.8.4
Unaffected: >= 3.8.4
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Mercurial. Please
review the CVE identifier and bug reports referenced for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process.


Workaround

There is no known workaround at this time.

Resolution

All mercurial users should upgrade to the latest version: