Updated mercurial packages fix CVE-2014-9462
Publication date: 03 Apr 2015Modification date: 03 Apr 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9462
Description
Updated mercurial packages fix security vulnerability: The mercurial source code management system suffers from a code-injection flaw due to insufficient shell quoting in sshpeer._validaterepo() (CVE-2014-9462).
References
SRPMS
4/core
- mercurial-2.7.2-3.1.mga4