CVE-2008-2942
Fixed in a distro release EPSS 2%
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.
Products: mercurial
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | mercurial | 1.0.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mercurial | 1.0.1-2 |
| Debian 13 | mercurial | 1.0.1-2 |
| Debian 14 | mercurial | 1.0.1-2 |
| openSUSE Tumbleweed | mercurial | 5.9.1-2.1 |