Vulnerability Name:

CVE-2019-3902 (CCN-159975)

Assigned:2019-04-18
Published:2019-04-18
Updated:2020-07-31
Summary:A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
CVSS v3 Severity:5.9 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
5.2 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): High
Availibility (A): None
6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): High
Availibility (A): None
CVSS v2 Severity:5.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): Partial
4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:C/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Complete
Availibility (A): None
Vulnerability Type:CWE-59
Vulnerability Consequences:Bypass Security
References:Source: MITRE
Type: CNA
CVE-2019-3902

Source: CCN
Type: Red Hat Bugzilla – Bug 1696025
(CVE-2019-3902) - CVE-2019-3902 mercurial: Path-checking logic bypass vie symlinks and subrepositories

Source: CONFIRM
Type: Issue Tracking, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3902

Source: XF
Type: UNKNOWN
mercurial-cve20193902-sec-bypass(159975)

Source: MLIST
Type: Third Party Advisory
[debian-lts-announce] 20190425 [SECURITY] [DLA 1764-1] mercurial security update

Source: MLIST
Type: UNKNOWN
[debian-lts-announce] 20200731 [SECURITY] [DLA 2293-1] mercurial security update

Source: UBUNTU
Type: UNKNOWN
USN-4086-1

Source: CCN
Type: Mercurial Web site
Mercurial

Source: MISC
Type: Third Party Advisory
https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.9_.282019-02-01.29

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2019-3902

Vulnerable Configuration:Configuration 1:
  • cpe:/a:mercurial:mercurial:*:*:*:*:*:*:*:* (Version < 4.9)

    • Configuration 2:
  • cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20193902
    V
    		CVE-2019-3902
    2023-06-22
    oval:org.opensuse.security:def:7718
    P
    		mercurial-5.9.1-150400.1.8 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:3699
    P
    		Security update for python3 (Important)
    2022-07-11
    oval:org.opensuse.security:def:3178
    P
    		libgnomesu-2.0.0-353.6.2 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3009
    P
    		apache-commons-httpclient-3.1-4.364 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3819
    P
    		wget-1.14-21.10.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3157
    P
    		libass5-0.10.2-3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3197
    P
    		libjson-c2-0.11-2.15 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3033
    P
    		clamav-0.101.3-1.19 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3124
    P
    		libFLAC++6-1.3.0-11.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3267
    P
    		libthai-data-0.1.25-4.2 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3164
    P
    		libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3205
    P
    		libltdl7-2.4.2-17.4.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3039
    P
    		cracklib-2.9.0-7.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3216
    P
    		libneon27-0.30.0-3.64 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3836
    P
    		yubikey-manager-0.6.0-1.27 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3825
    P
    		xfsprogs-4.15.0-1.12 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3246
    P
    		libquicktime0-1.2.4-14.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3255
    P
    		libsolv-tools-0.6.36-2.16.2 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3049
    P
    		davfs2-1.5.2-2.3 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3152
    P
    		libXxf86vm1-1.1.3-3.53 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3270
    P
    		libu2f-host0-1.1.6-3.5.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3687
    P
    		libthai-data-0.1.25-4.2 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3047
    P
    		cvs-1.12.12-182.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3273
    P
    		libupsclient1-2.7.4-3.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3000
    P
    		MozillaFirefox-68.1.0-109.92.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3269
    P
    		libtirpc-netconfig-1.0.1-17.13.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:94754
    P
    		mercurial-5.9.1-150400.1.8 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94975
    P
    		libvdpau-devel-1.1.1-1.28 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2958
    P
    		jq-1.6-3.3.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2980
    P
    		libXfont2-2-2.0.3-1.17 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2962
    P
    		keylime-agent-6.3.0-150400.2.5 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2994
    P
    		libarchive-devel-3.5.1-150400.1.9 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2968
    P
    		libFS-devel-1.0.7-1.22 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:4695
    P
    		Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important)
    2022-03-01
    oval:org.opensuse.security:def:4698
    P
    		Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP5) (Important)
    2022-03-01
    oval:org.opensuse.security:def:4679
    P
    		Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5) (Critical)
    2022-02-16
    oval:org.opensuse.security:def:112980
    P
    		mercurial-5.9.1-2.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:101688
    P
    		Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container (Important)
    2022-01-10
    oval:org.opensuse.security:def:64831
    P
    		Security update for libvirt (Important)
    2022-01-04
    oval:org.opensuse.security:def:51711
    P
    		Security update for glib-networking (Important)
    2021-12-13
    oval:org.opensuse.security:def:73755
    P
    		Security update for gmp (Moderate)
    2021-12-06
    oval:org.opensuse.security:def:67329
    P
    		Security update for the Linux Kernel (Important)
    2021-11-25
    oval:org.opensuse.security:def:51696
    P
    		Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:64599
    P
    		Security update for apache2 (Important)
    2021-10-26
    oval:org.opensuse.security:def:51677
    P
    		Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)
    2021-10-18
    oval:org.opensuse.security:def:65599
    P
    		Security update for rpm (Important)
    2021-10-15
    oval:org.opensuse.security:def:106427
    P
    		mercurial-5.9.1-2.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:64582
    P
    		Security update for postgresql12 (Moderate)
    2021-09-29
    oval:org.opensuse.security:def:64759
    P
    		Security update for python39 (Important)
    2021-09-03
    oval:org.opensuse.security:def:73876
    P
    		Security update for qemu (Moderate)
    2021-08-27
    oval:org.opensuse.security:def:63354
    P
    		libvirt-7.1.0-4.1 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63447
    P
    		perl-rrdtool-1.7.0-4.34 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:72753
    P
    		perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:51626
    P
    		Security update for qemu (Important)
    2021-07-29
    oval:org.opensuse.security:def:67185
    P
    		Security update for clamav-database (Important)
    2021-07-19
    oval:org.opensuse.security:def:64724
    P
    		Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:64723
    P
    		Security update for libgcrypt (Important)
    2021-06-24
    oval:org.opensuse.security:def:70433
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:64718
    P
    		Security update for salt (Critical)
    2021-06-21
    oval:org.opensuse.security:def:70782
    P
    		Security update for MozillaThunderbird (Moderate)
    2021-06-04
    oval:org.opensuse.security:def:64701
    P
    		Security update for ceph (Important)
    2021-06-02
    oval:org.opensuse.security:def:64492
    P
    		Security update for java-11-openjdk (Important)
    2021-05-11
    oval:org.opensuse.security:def:64491
    P
    		Security update for libxml2 (Moderate)
    2021-05-05
    oval:org.opensuse.security:def:67090
    P
    		Security update for openexr (Important)
    2021-05-04
    oval:org.opensuse.security:def:51541
    P
    		Security update for MozillaFirefox (Important)
    2021-04-27
    oval:org.opensuse.security:def:70541
    P
    		Security update for java-1_8_0-openjdk (Moderate)
    2021-03-01
    oval:org.opensuse.security:def:51170
    P
    		Security update for MozillaFirefox (Important)
    2021-03-01
    oval:org.opensuse.security:def:51730
    P
    		Security update for wpa_supplicant (Important)
    2021-02-15
    oval:org.opensuse.security:def:51607
    P
    		Security update for openssh (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:51151
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:4053
    P
    		Security update for openexr (Moderate)
    2020-12-24
    oval:org.opensuse.security:def:63140
    P
    		apache2-mod_apparmor-2.12-5.9 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4025
    P
    		libotr-devel-4.0.0-9.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4037
    P
    		libproxy-devel-0.4.13-16.3 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63154
    P
    		guestfs-data-1.38.0-3.52 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3911
    P
    		gstreamer-0_10-plugins-base-devel-0.10.36-18.3.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4041
    P
    		libqt4-devel-4.8.7-8.8.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4034
    P
    		libpodofo-devel-0.9.2-3.9.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63176
    P
    		python3-pywbem-0.11.0-2.21 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62951
    P
    		glibc-devel-32bit-2.26-13.48.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3874
    P
    		dbus-1-glib-devel-0.100.2-3.58 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4056
    P
    		libsrtp-devel-1.5.2-3.2.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3905
    P
    		glibc-devel-static-2.22-100.15.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:72183
    P
    		libplist++-devel-2.0.0-1.31 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4029
    P
    		libpcrecpp0-8.39-8.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4060
    P
    		libsvn_auth_kwallet-1-0-1.8.10-24.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3854
    P
    		audiofile-devel-0.3.6-11.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3917
    P
    		gwenhywfar-devel-4.9.0beta-3.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63148
    P
    		dovecot23-2.3.1-2.20 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3893
    P
    		fuse-devel-2.9.3-6.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3933
    P
    		libSDL-devel-1.2.15-15.11.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62944
    P
    		ctags-5.8-1.27 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3843
    P
    		LibVNCServer-devel-0.9.9-17.14.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3924
    P
    		java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3989
    P
    		libicu-devel-52.1-8.7.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:72637
    P
    		perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4048
    P
    		libsaml-devel-2.5.5-3.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62948
    P
    		dpkg-1.19.0.4-2.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3936
    P
    		libXdmcp-devel-1.1.1-12.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4006
    P
    		libmicrohttpd-devel-0.9.30-5.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3952
    P
    		libXxf86vm-devel-1.1.3-3.53 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:72299
    P
    		libsmi-devel-0.4.8-1.29 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63135
    P
    		clamsap-0.99.25-2.37 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4008
    P
    		libmms-devel-0.6.2-15.8 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62976
    P
    		perl-Net-Libproxy-0.4.15-2.42 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4716
    P
    		Security update for mercurial (Low)
    2020-12-02
    oval:org.opensuse.security:def:65121
    P
    		Security update for gmp, gnutls, libnettle (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:70672
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:49817
    P
    		binutils-devel-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50070
    P
    		libfreebl3-hmac on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:65509
    P
    		Security update for gcc9 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63797
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:51440
    P
    		Security update for python3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:50912
    P
    		Security update for permissions (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:67426
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:75066
    P
    		Security update for libetpan (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52132
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:49670
    P
    		libimobiledevice-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50024
    P
    		openssh-fips on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50227
    P
    		gimp on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50336
    P
    		Security update for opensc (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63657
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:64026
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:68843
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:18232
    P
    		Security update for libquicktime (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64999
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:52294
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49689
    P
    		libpotrace0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50175
    P
    		NetworkManager-lang on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50465
    P
    		Security update for python-numpy (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73994
    P
    		Security update for the Linux Kernel (Critical)
    2020-12-01
    oval:org.opensuse.security:def:63863
    P
    		Security update for java-1_7_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:64355
    P
    		libnewt0_52 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50845
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:51786
    P
    		Security update for docker-runc (Important)
    2020-12-01
    oval:org.opensuse.security:def:18716
    P
    		Security update for spice-gtk (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:74946
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:50489
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50275
    P
    		Security update for rpm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50555
    P
    		Security update for clamav (Important)
    2020-12-01
    oval:org.opensuse.security:def:65963
    P
    		Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)
    2020-12-01
    oval:org.opensuse.security:def:64018
    P
    		Security update for postgresql10 (Low)
    2020-12-01
    oval:org.opensuse.security:def:68946
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:64933
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:52356
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:50337
    P
    		Security update for systemd (Important)
    2020-12-01
    oval:org.opensuse.security:def:50720
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:50434
    P
    		Security update for gpg2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:50353
    P
    		Security update for qemu (Important)
    2020-12-01
    oval:org.opensuse.security:def:18359
    P
    		Security update for postgresql94 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64249
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:69297
    P
    		Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)
    2020-12-01
    oval:org.opensuse.security:def:18694
    P
    		Security update for libcdio (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53062
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:50357
    P
    		Security update for libnettle (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50883
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50678
    P
    		Security update for tcpdump (Important)
    2020-12-01
    oval:org.opensuse.security:def:19354
    P
    		Security update for libsolv (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66053
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:18240
    P
    		Security update for rrdtool (Low)
    2020-12-01
    oval:org.opensuse.security:def:18416
    P
    		Security update for gnome-shell (Low)
    2020-12-01
    oval:org.opensuse.security:def:51805
    P
    		Security update for python-azure-agent (Important)
    2020-12-01
    oval:org.opensuse.security:def:75203
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:49475
    P
    		libxcb-render0-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50507
    P
    		Security update for strongswan (Important)
    2020-12-01
    oval:org.opensuse.security:def:50987
    P
    		Security update for gcc10, nvptx-tools (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50771
    P
    		Security update for curl (Important)
    2020-12-01
    oval:org.opensuse.security:def:50721
    P
    		Security update for spectre-meltdown-checker (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:18274
    P
    		Security update for Botan (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:18447
    P
    		Security update for liblouis (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:69400
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:18682
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53126
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:50354
    P
    		Security update for ghostscript (Important)
    2020-12-01
    oval:org.opensuse.security:def:50739
    P
    		Security update for libssh (Important)
    2020-12-01
    oval:org.opensuse.security:def:50794
    P
    		Security update for libX11 (Important)
    2020-12-01
    oval:org.opensuse.security:def:74117
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:18483
    P
    		Security update for php5 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64871
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49621
    P
    		file-roller on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53081
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:50375
    P
    		Security update for ucode-intel (Important)
    2020-12-01
    oval:org.opensuse.security:def:50902
    P
    		Security update for icu (Important)
    2020-12-01
    oval:org.opensuse.security:def:51421
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:50690
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:18593
    P
    		Security update for openslp (Important)
    2020-12-01
    oval:org.opensuse.security:def:74813
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:49476
    P
    		libyaml-cpp0_6 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49826
    P
    		crash on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49669
    P
    		libid3tag0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51006
    P
    		Security update for ucode-intel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51522
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50944
    P
    		Security update for java-11-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:18625
    P
    		Security update for net-snmp (Important)
    2020-12-01
    oval:org.opensuse.security:def:52070
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:49494
    P
    		wavpack on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49972
    P
    		python3-pywbem on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53147
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:63650
    P
    		Security update for libqt5-qtbase (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50625
    P
    		Security update for kernel-firmware (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51018
    P
    		Security update for postgresql12 (Important)
    2020-12-01
    oval:org.opensuse.security:def:19380
    P
    		Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:75584
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:108354
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:109293
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:76504
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:118384
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:95914
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:102627
    P
    		Security update for mercurial (Low)
    2020-07-15
    oval:org.opensuse.security:def:110940
    P
    		Security update for mercurial (Low)
    2020-06-27
    oval:org.opensuse.security:def:110608
    P
    		Security update for mercurial (Low)
    2020-06-26
    oval:org.opensuse.security:def:91642
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:98607
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:76480
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:104620
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:75326
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:90965
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:105297
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:org.opensuse.security:def:97930
    P
    		Security update for mercurial (Low)
    2020-06-23
    oval:com.ubuntu.disco:def:201939020000000
    V
    		CVE-2019-3902 on Ubuntu 19.04 (disco) - medium.
    2019-04-22
    oval:com.ubuntu.cosmic:def:20193902000
    V
    		CVE-2019-3902 on Ubuntu 18.10 (cosmic) - medium.
    2019-04-22
    oval:com.ubuntu.cosmic:def:201939020000000
    V
    		CVE-2019-3902 on Ubuntu 18.10 (cosmic) - medium.
    2019-04-22
    oval:com.ubuntu.bionic:def:20193902000
    V
    		CVE-2019-3902 on Ubuntu 18.04 LTS (bionic) - medium.
    2019-04-22
    oval:com.ubuntu.bionic:def:201939020000000
    V
    		CVE-2019-3902 on Ubuntu 18.04 LTS (bionic) - medium.
    2019-04-22
    oval:com.ubuntu.xenial:def:20193902000
    V
    		CVE-2019-3902 on Ubuntu 16.04 LTS (xenial) - medium.
    2019-04-22
    oval:com.ubuntu.xenial:def:201939020000000
    V
    		CVE-2019-3902 on Ubuntu 16.04 LTS (xenial) - medium.
    2019-04-22
    oval:com.ubuntu.trusty:def:20193902000
    V
    		CVE-2019-3902 on Ubuntu 14.04 LTS (trusty) - medium.
    2019-04-22
    BACK
    mercurial mercurial *
    debian debian linux 8.0
    redhat enterprise linux 7.0