Zhixiong Chi a3bd8e6b3d mercurial: CVE-2017-9462 ...

Backport the CVE patch from
https://www.mercurial-scm.org/repo/hg/rev/77eaf9539499

"hg serve --stdio" allows remote authenticated users to launch the
Python debugger, and consequently execute arbitrary code, by using
 --debugger as a repository name.

CVE: CVE-2017-9462

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>

2017-06-19 19:29:37 +02:00

..

files

mercurial: CVE-2017-9462

2017-06-19 19:29:37 +02:00

mercurial-native_4.0.1.bb

mercurial: CVE-2017-9462

2017-06-19 19:29:37 +02:00