Arch Linux
Home
Packages
Forums
Wiki
GitLab
Security
AUR
Download
issues
advisories
todo
stats
log
login
ASA-201708-7 - log
back
ASA-201708-7
created
at 25 Sep 2019 19:32:14
Workaround
Impact
+
A remote attacker can execute arbitrary command on the affected host by tricking a user into executing a hg command. A remote attacker can use crafted commits mixing symlinks and regular files to get access to files outside the repository.