Your submission was sent successfully! Close

USN-4086-1: Mercurial vulnerability

6 August 2019

Mercurial could be made to overwrite files.



  • mercurial - easy-to-use, scalable distributed version control system


It was discovered that Mercurial mishandled symlinks in subrepositories. An
attacker could use this vulnerability to write arbitrary files to the
target's filesystem.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04

In general, a standard system update will make all the necessary changes.


Related notices