Insecure session management In mercurial
Description
multiple issues
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | >=0 <4.3.1 | 4.3.1 | |
 alpine v3.5 | =1.4.1-r0 || =1.4.2-r0 || =1.4.3-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.3-r0 || =1.5.4-r0 || =1.6-r0 || =1.6.2-r0 || =1.6.3-r0 || =1.6.4-r0 || =1.7-r0 || =1.7.1-r0 || =1.7.2-r0 || =1.7.3-r0 || =1.7.5-r0 || =1.8-r0 || =1.8.1-r0 || =1.8.2-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.4-r1 || =1.9-r0 || =1.9.1-r0 || =1.9.2-r0 || =1.9.3-r0 || =2.0-r0 || =2.0.1-r0 || =2.0.2-r0 || =2.1-r0 || =2.1.1-r0 || =2.1.2-r0 || =2.2.1-r0 || =2.2.2-r0 || =2.2.3-r0 || =2.3-r0 || =2.3.1-r0 || =2.3.2-r0 || =2.4-r0 || =2.4.1-r0 || =2.4.2-r0 || =2.5.1-r0 || =2.5.2-r0 || =2.5.4-r0 || =2.6-r0 || =2.6.1-r0 || =2.6.2-r0 || =2.6.3-r0 || =2.7-r0 || =2.7.1-r0 || =2.7.2-r0 || =2.8-r0 || =2.8.1-r0 || =2.8.2-r0 || =2.9-r0 || =2.9.1-r0 || =2.9.2-r0 || =3.0-r0 || =3.0.2-r0 || =3.1-r0 || =3.1.1-r0 || =3.2.1-r0 || =3.2.2-r0 || =3.2.3-r0 || =3.3-r0 || =3.3.3-r0 || =3.4-r0 || =3.4.1-r0 || =3.4.2-r0 || =3.5-r0 || =3.5.1-r0 || =3.5.2-r0 || =3.6.2-r0 || =3.7.1-r0 || =3.7.2-r0 || =3.7.3-r0 || =3.8.1-r0 || =3.8.2-r0 || =3.8.3-r0 || =3.9-r0 || =3.9-r1 || =3.9.1-r0 || =4.0.1-r0 || >=0 <4.3.1-r0 | 4.3.1-r0 | |
alpine v3.3 | =1.4.1-r0 || =1.4.2-r0 || =1.4.3-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.3-r0 || =1.5.4-r0 || =1.6-r0 || =1.6.2-r0 || =1.6.3-r0 || =1.6.4-r0 || =1.7-r0 || =1.7.1-r0 || =1.7.2-r0 || =1.7.3-r0 || =1.7.5-r0 || =1.8-r0 || =1.8.1-r0 || =1.8.2-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.4-r1 || =1.9-r0 || =1.9.1-r0 || =1.9.2-r0 || =1.9.3-r0 || =2.0-r0 || =2.0.1-r0 || =2.0.2-r0 || =2.1-r0 || =2.1.1-r0 || =2.1.2-r0 || =2.2.1-r0 || =2.2.2-r0 || =2.2.3-r0 || =2.3-r0 || =2.3.1-r0 || =2.3.2-r0 || =2.4-r0 || =2.4.1-r0 || =2.4.2-r0 || =2.5.1-r0 || =2.5.2-r0 || =2.5.4-r0 || =2.6-r0 || =2.6.1-r0 || =2.6.2-r0 || =2.6.3-r0 || =2.7-r0 || =2.7.1-r0 || =2.7.2-r0 || =2.8-r0 || =2.8.1-r0 || =2.8.2-r0 || =2.9-r0 || =2.9.1-r0 || =2.9.2-r0 || =3.0-r0 || =3.0.2-r0 || =3.1-r0 || =3.1.1-r0 || =3.2.1-r0 || =3.2.2-r0 || =3.2.3-r0 || =3.3-r0 || =3.3.3-r0 || =3.4-r0 || =3.4.1-r0 || =3.4.2-r0 || =3.5-r0 || =3.5.1-r0 || =3.5.2-r0 || =3.6.2-r0 || =3.7.3-r0 || =3.7.3-r1 || >=0 <4.3.1-r0 | 4.3.1-r0 | |
alpine v3.4 | =1.4.1-r0 || =1.4.2-r0 || =1.4.3-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.3-r0 || =1.5.4-r0 || =1.6-r0 || =1.6.2-r0 || =1.6.3-r0 || =1.6.4-r0 || =1.7-r0 || =1.7.1-r0 || =1.7.2-r0 || =1.7.3-r0 || =1.7.5-r0 || =1.8-r0 || =1.8.1-r0 || =1.8.2-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.4-r1 || =1.9-r0 || =1.9.1-r0 || =1.9.2-r0 || =1.9.3-r0 || =2.0-r0 || =2.0.1-r0 || =2.0.2-r0 || =2.1-r0 || =2.1.1-r0 || =2.1.2-r0 || =2.2.1-r0 || =2.2.2-r0 || =2.2.3-r0 || =2.3-r0 || =2.3.1-r0 || =2.3.2-r0 || =2.4-r0 || =2.4.1-r0 || =2.4.2-r0 || =2.5.1-r0 || =2.5.2-r0 || =2.5.4-r0 || =2.6-r0 || =2.6.1-r0 || =2.6.2-r0 || =2.6.3-r0 || =2.7-r0 || =2.7.1-r0 || =2.7.2-r0 || =2.8-r0 || =2.8.1-r0 || =2.8.2-r0 || =2.9-r0 || =2.9.1-r0 || =2.9.2-r0 || =3.0-r0 || =3.0.2-r0 || =3.1-r0 || =3.1.1-r0 || =3.2.1-r0 || =3.2.2-r0 || =3.2.3-r0 || =3.3-r0 || =3.3.3-r0 || =3.4-r0 || =3.4.1-r0 || =3.4.2-r0 || =3.5-r0 || =3.5.1-r0 || =3.5.2-r0 || =3.6.2-r0 || =3.7.1-r0 || =3.7.2-r0 || =3.7.3-r0 || =3.8.1-r0 || =3.8.2-r0 || >=0 <4.3.1-r0 | 4.3.1-r0 | |
alpine v3.6 | =1.4.1-r0 || =1.4.2-r0 || =1.4.3-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.3-r0 || =1.5.4-r0 || =1.6-r0 || =1.6.2-r0 || =1.6.3-r0 || =1.6.4-r0 || =1.7-r0 || =1.7.1-r0 || =1.7.2-r0 || =1.7.3-r0 || =1.7.5-r0 || =1.8-r0 || =1.8.1-r0 || =1.8.2-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.4-r1 || =1.9-r0 || =1.9.1-r0 || =1.9.2-r0 || =1.9.3-r0 || =2.0-r0 || =2.0.1-r0 || =2.0.2-r0 || =2.1-r0 || =2.1.1-r0 || =2.1.2-r0 || =2.2.1-r0 || =2.2.2-r0 || =2.2.3-r0 || =2.3-r0 || =2.3.1-r0 || =2.3.2-r0 || =2.4-r0 || =2.4.1-r0 || =2.4.2-r0 || =2.5.1-r0 || =2.5.2-r0 || =2.5.4-r0 || =2.6-r0 || =2.6.1-r0 || =2.6.2-r0 || =2.6.3-r0 || =2.7-r0 || =2.7.1-r0 || =2.7.2-r0 || =2.8-r0 || =2.8.1-r0 || =2.8.2-r0 || =2.9-r0 || =2.9.1-r0 || =2.9.2-r0 || =3.0-r0 || =3.0.2-r0 || =3.1-r0 || =3.1.1-r0 || =3.2.1-r0 || =3.2.2-r0 || =3.2.3-r0 || =3.3-r0 || =3.3.3-r0 || =3.4-r0 || =3.4.1-r0 || =3.4.2-r0 || =3.5-r0 || =3.5.1-r0 || =3.5.2-r0 || =3.6.2-r0 || =3.7.1-r0 || =3.7.2-r0 || =3.7.3-r0 || =3.8.1-r0 || =3.8.2-r0 || =3.8.3-r0 || =3.9-r0 || =3.9-r1 || =3.9.1-r0 || =4.0.1-r0 || =4.1-r0 || =4.1.1-r0 || =4.1.2-r0 || =4.1.3-r0 || >=0 <4.3.1-r0 | 4.3.1-r0 | |
 debian 13 | >=0 <4.3.1-1 | 4.3.1-1 | |
debian 14 | >=0 <4.3.1-1 | 4.3.1-1 | |
debian 12 | >=0 <4.3.1-1 | 4.3.1-1 | |
debian 11 | >=0 <4.3.1-1 | 4.3.1-1 | |
 rpm rhel7 | <0:2.6.2-8.el7_4 | 0:2.6.2-8.el7_4 |
1-10 of 12
10
Aliases
References
1. https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2017-88.yaml2. https://web.archive.org/web/20200227155758/http://www.securityfocus.com/bid/1002903. https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.294. http://www.debian.org/security/2017/dsa-3963
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.