Package: mercurial
Severity: important
Tags: security
Please see
http://chargen.matasano.com/chargen/2015/3/17/this-new-vulnerability-mercurial-command-injection-cve-2014-9462.html
Fix:
http://selenic.com/hg/rev/e3f30068d2eb
Cheers,
Moritz