Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0355
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0355)
Zusammenfassung:	The remote host is missing an update for the 'mercurial' package(s) announced via the MGASA-2018-0355 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'mercurial' package(s) announced via the MGASA-2018-0355 advisory. Vulnerability Insight: This update provides mercurial version 4.6.2 and fixes the following security issues: Fix the mpatch_apply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data (CVE-2018-13346). Fix mpatch.c that mishandles integer addition and subtraction (CVE-2018-13347). Fix the mpatch_decode function in mpatch.c that mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data (CVE-2018-13348). Remote attackers may bypass HTTP server permissions via batch wire protocol commands(CVE-2018-1000132). Affected Software/OS: 'mercurial' package(s) on Mageia 5, Mageia 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000132 https://lists.debian.org/debian-lts-announce/2018/03/msg00034.html https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html RedHat Security Advisories: RHSA-2019:2276 https://access.redhat.com/errata/RHSA-2019:2276 Common Vulnerability Exposure (CVE) ID: CVE-2018-13346 https://www.mercurial-scm.org/repo/hg/rev/faa924469635 https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29 Common Vulnerability Exposure (CVE) ID: CVE-2018-13347 https://www.mercurial-scm.org/repo/hg-committed/log?rev=modifies%28%22mercurial%2Fmpatch.c%22%29+and+4.5%3A%3A https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c Common Vulnerability Exposure (CVE) ID: CVE-2018-13348 https://www.mercurial-scm.org/repo/hg/rev/90a274965de7
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.