Secunia

Some security issues have been reported in Mercurial, which can be exploited by malicious people to manipulate certain data or bypass certain security restrictions.

1) A security issue is caused due to an error within the "applydiff()" function in mercurial/patch.py. This can be exploited to manipulate arbitrary files placed outside the repository via directory traversal attacks.

Successful exploitation requires that a user is tricked into importing a malicious patch.

2) A security issue is caused due to hgweb not correctly honoring the "allowpull" setting, which can be exploited to e.g. pull from restricted repositories.

The security issue are reported in versions prior to 1.0.2.

Solution
Update to version 1.0.2.

Provided and/or discovered by
1) Gentoo credits Jakub Wilk.
2) Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.selenic.com/mercurial/wiki/index.cgi/WhatsNew#head-905b8adb3420a77d92617e06590055bd8952e02b

1) http://bugs.gentoo.org/show_bug.cgi?id=230193

Deep Links
Links available in Customer Area