Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mercurial@1.6.4-1?distro=trixie
purl pkg:deb/debian/mercurial@1.6.4-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-673d-uck5-tbb7 Mercurial Improper Certificate Validation vulnerability Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack. CVE-2010-4237
GHSA-7gf7-7wx4-mxmw

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:02:36.141431+00:00 Debian Importer Fixing VCID-673d-uck5-tbb7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:13:39.203160+00:00 Debian Importer Fixing VCID-673d-uck5-tbb7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:56.146512+00:00 Debian Importer Fixing VCID-673d-uck5-tbb7 https://security-tracker.debian.org/tracker/data/json 38.1.0