Mercurial 4.6.1 Released (includes security fixes)
Augie Fackler
raf at durin42.com
Wed Jun 6 17:37:43 UTC 2018
This release is urgent because it contains numerous fixes to mpatch.c - all were discovered with a fuzzer, but we can't prove they're not exploitable. You can back port these fixes to hg 4.0 and later by copying 4.6.1's mpatch.c to the old version. Versions prior to that can probably also be patched, but will require more work.
This also includes a zstandard update, and some miscellaneous bug fixes. The full release notes will be on the wiki shortly.
Thanks!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://www.mercurial-scm.org/pipermail/mercurial-packaging/attachments/20180606/53f488a7/attachment.sig>
More information about the Mercurial-packaging
mailing list