oss-security - CVE Request -- Arbitrary command execution in mercurial repo with a git submodule

Message-ID: <CAKSZ2QtFnvxxRAKSBiCB60T7LX641-+hVeeUddPmAYH426Zxdw@mail.gmail.com>
Date: Thu, 7 Dec 2017 16:53:44 +0800
From: feer james <pnigos70@...il.com>
To: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: CVE Request -- Arbitrary command execution in mercurial repo with a
 git submodule

Hello mitre,

I'd like to request a cve id for this vulnerability.

*Vulnerability Details:*
https://bz.mercurial-scm.org/show_bug.cgi?id=5730

*Offical fix release:*
https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4.1_.282017-11-07.29


Terry,
Thanks!

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.