MGASA-2017-0331

Source
https://advisories.mageia.org/MGASA-2017-0331.html
Import Source
https://advisories.mageia.org/MGASA-2017-0331.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2017-0331
Related
Published
2017-09-07T09:07:16Z
Modified
2017-09-07T08:47:12Z
Summary
Updated mercurial package fixes security vulnerabilities
Details

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand.

References
Credits

Affected packages