ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2018.0355
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2018-0355)
Resumen:	The remote host is missing an update for the 'mercurial' package(s) announced via the MGASA-2018-0355 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mercurial' package(s) announced via the MGASA-2018-0355 advisory. Vulnerability Insight: This update provides mercurial version 4.6.2 and fixes the following security issues: Fix the mpatch_apply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data (CVE-2018-13346). Fix mpatch.c that mishandles integer addition and subtraction (CVE-2018-13347). Fix the mpatch_decode function in mpatch.c that mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data (CVE-2018-13348). Remote attackers may bypass HTTP server permissions via batch wire protocol commands(CVE-2018-1000132). Affected Software/OS: 'mercurial' package(s) on Mageia 5, Mageia 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000132 https://lists.debian.org/debian-lts-announce/2018/03/msg00034.html https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html RedHat Security Advisories: RHSA-2019:2276 https://access.redhat.com/errata/RHSA-2019:2276 Common Vulnerability Exposure (CVE) ID: CVE-2018-13346 https://www.mercurial-scm.org/repo/hg/rev/faa924469635 https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29 Common Vulnerability Exposure (CVE) ID: CVE-2018-13347 https://www.mercurial-scm.org/repo/hg-committed/log?rev=modifies%28%22mercurial%2Fmpatch.c%22%29+and+4.5%3A%3A https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c Common Vulnerability Exposure (CVE) ID: CVE-2018-13348 https://www.mercurial-scm.org/repo/hg/rev/90a274965de7
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.