Mercurial Improper Certificate Validation vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2010-4237 · ADVISORY
• dscho/hg commit 4ea63fb · WEB
• dscho/hg commit 89baabf · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• bz.mercurial-scm.org/show_bug.cgi · WEB
• repo.mercurial-scm.org/hg/rev/6ab4a7d3c179 · WEB
• repo.mercurial-scm.org/hg/rev/f2937d6492c5 · WEB
• security-tracker.debian.org/tracker/CVE-2010-4237 · WEB
• pypi.org/project/mercurial · PACKAGE
• GitHub Advisory GHSA-7gf7-7wx4-mxmw · ADVISORY

mercurial의 다른 취약점

• CVE-2014-9390심각 9.8Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before…
• CVE-2019-3902보통 5.9A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and …
• CVE-2018-17983심각 9.1cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
• CVE-2018-13348높음 7.5The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remai…
• CVE-2018-13347심각 9.8mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.