USN-4086-1: Mercurial vulnerability

06 August 2019

Mercurial could be made to overwrite files.

Releases

Packages

  • mercurial - easy-to-use, scalable distributed version control system

Details

It was discovered that Mercurial mishandled symlinks in subrepositories. An
attacker could use this vulnerability to write arbitrary files to the
target's filesystem.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04

In general, a standard system update will make all the necessary changes.

References