Alpine/mercurial: critical 9.8

Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

Action: Upgrade mercurial to 4.3.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2017-1000116#Alpine:v3.6/mercurial
• https://security.alpinelinux.org/vuln/CVE-2017-1000116

published 2017-10-05T01:29:04.617Z · modified 2026-06-15T18:23:53.171540297Z · JSON