CVE:CVE-2014-9390
CNNVD:CNNVD-201412-509
Mercurial是Matt Mackall个人开发者的一套使用Python语言编写的跨平台的分布式版本控制软件。该软件支持同时处理纯文本和二进制文件等。
Mercurial存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade git-scm git to a higher version than 1.8.5.6,1.9.5,2.0.5,2.1.4,2.2.1,and avoid the version (,1.8.5.6),[1.9.0,1.9.5),[2.0.0,2.0.5),[2.1.0,2.1.4),[2.2.0,2.2.1); Upgrade mercurial mercurial to a higher version than 3.2.3,and avoid the version (,3.2.3); Upgrade apple xcode to a higher version than 6.1.1,6.2,6.2:beta_2,and avoid the version (,6.1.1],6.2,6.2:beta_2; Upgrade eclipse egit to a higher version than 08-12-2014,and avoid the version (,08-12-2014); Upgrade eclipse jgit to a higher version than 3.4.2,3.5.3,and avoid the version (,3.4.2),[3.5.0,3.5.3); Upgrade libgit2 libgit2 to a higher version than 0.21.3,and avoid the version (,0.21.3)