Advisories ยป MGASA-2015-0129

Updated mercurial packages fix CVE-2014-9462

Publication date: 03 Apr 2015
Modification date: 03 Apr 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9462

Description

Updated mercurial packages fix security vulnerability:

The mercurial source code management system suffers from a code-injection
flaw due to insufficient shell quoting in sshpeer._validaterepo()
(CVE-2014-9462).
                

References

SRPMS

4/core