Debian/mercurial: unknown

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

Action: Upgrade mercurial to 1.0.1-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-2942#Debian:13/mercurial
• https://security-tracker.debian.org/tracker/CVE-2008-2942

published 2008-06-30T20:41:00Z · modified 2026-10-23T17:47:32.352894562Z · JSON