cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "mercurial": "4.5.3-1ubuntu2.2", "mercurial-dbgsym": "4.5.3-1ubuntu2.2", "mercurial-common": "4.5.3-1ubuntu2.2" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "mercurial": "4.5.3-1ubuntu2.2", "mercurial-dbgsym": "4.5.3-1ubuntu2.2", "mercurial-common": "4.5.3-1ubuntu2.2" } ] }