[Secure-testing-commits] r58341 - data/CVE

Thu Dec 7 21:14:42 UTC 2017

Author: carnil
Date: 2017-12-07 21:14:42 +0000 (Thu, 07 Dec 2017)
New Revision: 58341

Modified:
   data/CVE/list
Log:
Add CVE-2017-17458/mercurial, fixed already in unstable

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-12-07 21:10:12 UTC (rev 58340)
+++ data/CVE/list	2017-12-07 21:14:42 UTC (rev 58341)
@@ -121,7 +121,10 @@
 CVE-2017-17459 (http_transport.c in Fossil before 2.4, when the SSH sync protocol is ...)
 	TODO: check
 CVE-2017-17458 (In Mercurial before 4.4.1, it is possible that a specially malformed ...)
-	TODO: check
+	- mercurial 4.4.1-1
+	NOTE: https://bz.mercurial-scm.org/show_bug.cgi?id=5730
+	NOTE: https://www.mercurial-scm.org/pipermail/mercurial-devel/2017-November/107333.html
+	NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4.1_.282017-11-07.29
 CVE-2017-1002102
 	RESERVED
 CVE-2017-1002101


