CVE:CVE-2016-3069
CNNVD:CNNVD-201604-014
Mercurial是软件开发者Matt Mackall所研发的一套使用Python语言编写的跨平台的分布式版本控制软件。该软件支持同时处理纯文本和二进制文件等。
Mercurial 3.7.3之前版本中存在安全漏洞。远程攻击者可借助转换Git资源库时特制的名称利用该漏洞执行任意代码。
solution:Upgrade mercurial mercurial to a higher version than 3.7.2,and avoid the version (,3.7.2]; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp4,12,12:sp1,and avoid the version 11:sp4,12,12:sp1; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0