Oval Definition:	oval:org.opensuse.security:def:201717458
Revision Date: 2023-06-22 Version: 1 Title: CVE-2017-17458 Description: In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-17458 SUSE-SU-2018:0127-1 SUSE-SU-2018:0129-1 openSUSE-SU-2017:3355-1 Mitre CVE-2017-17458 SUSE CVE-2017-17458 SUSE-SU-2018:0127-1 SUSE-SU-2018:0129-1 openSUSE-SU-2017:3355-1 Platform(s): openSUSE Leap 42.2 openSUSE Leap 42.3 openSUSE Tumbleweed SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 12 SP5 SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 Product(s): Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information mercurial-4.2.3-7 is installed AND mercurial is signed with openSUSE key OR mercurial-lang-4.2.3-7 is installed AND mercurial-lang is signed with openSUSE key Definition Synopsis openSUSE Leap 42.2 is installed AND Package Information mercurial-3.8.3-2.11.1 is installed AND mercurial is signed with openSUSE key OR mercurial-lang-3.8.3-2.11.1 is installed AND mercurial-lang is signed with openSUSE key Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND mercurial-2.3.2-0.18.6 is installed Definition Synopsis Release Information SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND mercurial-2.8.2-15.6 is installed OR Package Information SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND mercurial-2.8.2-15.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND mercurial-4.5.2-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Software Development Kit 12 SP2 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND mercurial-2.8.2-15.6 is installed OR Package Information SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND mercurial-2.8.2-15.13 is installed Definition Synopsis Release Information SUSE Linux Enterprise Software Development Kit 12 SP2 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND mercurial-2.8.2-15.6 is installed OR Package Information SUSE Linux Enterprise Software Development Kit 12 SP4 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed AND mercurial-2.8.2-15.13 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Development Tools 15 is installed AND mercurial-4.5.2-1 is installed OR Package Information SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND mercurial-4.5.2-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND mercurial-4.5.2-3.6 is installed Definition Synopsis openSUSE Tumbleweed is installed AND Package Information mercurial-5.9.1-2.1 is installed OR mercurial-lang-5.9.1-2.1 is installed OR mercurial-tests-5.9.1-2.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Software Development Kit 12 SP4 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed AND mercurial-2.8.2-15.13.1 is installed OR Package Information SUSE Linux Enterprise Software Development Kit 12 SP2 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND mercurial-2.8.2-15.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 is installed OR SUSE Linux Enterprise High Performance Computing 15 is installed OR SUSE Linux Enterprise Module for Development Tools 15 is installed OR SUSE Linux Enterprise Server 15 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 is installed AND mercurial-4.5.2-1.19 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND mercurial-5.9.1-150400.1.8 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed AND mercurial-2.8.2-15.13.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND mercurial-2.8.2-15.13.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND mercurial-5.9.1-150400.1.8 is installed
BACK