CVE-2018-17983
Fixed in a distro release EPSS 2%
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
Products: mercurial
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | mercurial | 4.7.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mercurial | 4.7.2-1 |
| Debian 13 | mercurial | 4.7.2-1 |
| Debian 14 | mercurial | 4.7.2-1 |
| SUSE Linux Enterprise Module for Development Tools 15 | mercurial | 4.5.2-3.6.1 |
| Ubuntu 18.04 LTS | mercurial | 4.5.3-1ubuntu2.2 |
| Ubuntu Pro 14.04 LTS | mercurial | 2.8.2-1ubuntu1.4+esm1 |
| Ubuntu Pro 16.04 LTS | mercurial | 3.7.3-1ubuntu1.2+esm2 |
| openSUSE Tumbleweed | mercurial | 5.9.1-2.1 |