Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mercurial@4.6.1-1?distro=trixie
purl pkg:deb/debian/mercurial@4.6.1-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-1kmd-1kun-qbdd The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004. CVE-2018-13346
GHSA-9xv4-r2hf-26gh
PYSEC-2018-88
VCID-hhwu-knps-qqfw mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002. CVE-2018-13347
GHSA-3mjj-mr4f-qxmx
PYSEC-2018-89
VCID-v91s-ety2-x7au The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001. CVE-2018-13348
GHSA-3v62-ww8w-758m
PYSEC-2018-90

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:31:48.712066+00:00 Debian Importer Fixing VCID-v91s-ety2-x7au https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:19:26.102410+00:00 Debian Importer Fixing VCID-hhwu-knps-qqfw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:46:54.255430+00:00 Debian Importer Fixing VCID-1kmd-1kun-qbdd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:52:54.016192+00:00 Debian Importer Fixing VCID-v91s-ety2-x7au https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:56:57.720121+00:00 Debian Importer Fixing VCID-hhwu-knps-qqfw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:57:12.908506+00:00 Debian Importer Fixing VCID-1kmd-1kun-qbdd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:56.937388+00:00 Debian Importer Fixing VCID-v91s-ety2-x7au https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:56.881397+00:00 Debian Importer Fixing VCID-hhwu-knps-qqfw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:56.825619+00:00 Debian Importer Fixing VCID-1kmd-1kun-qbdd https://security-tracker.debian.org/tracker/data/json 38.1.0