MGASA-2018-0041

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0041.html

Import Source

https://advisories.mageia.org/MGASA-2018-0041.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2018-0041

Related

Published

2018-01-03T14:22:14Z

Modified

2018-01-03T13:52:50Z

Summary

Updated mercurial packages fix security vulnerability

Details

A specially malformed repository may have caused Git subrepositories to run arbitrary code (CVE-2017-17458).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.3-1.2.mga6

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.1-5.6.mga5

{
    "section": "core"
}