Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses

Filter by:

With package: python312Packages.mercurial

Found 1 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2010-4237

created 2 months ago Activity log

Created suggestion 2 months ago

Mercurial before 1.6.4 fails to verify the Common Name field …

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

References

https://security-tracker.debian.org/tracker/CVE-2010-4237 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4237 x_transferredx_refsource_CONFIRM
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598841 x_transferredx_refsource_MISC
https://bz.mercurial-scm.org/show_bug.cgi?id=2407 x_transferredx_refsource_CONFIRM

Affected products

mercurial

==1.6.4

Matching in nixpkgs

pkgs.mercurial

Fast, lightweight SCM system for very large distributed projects

nixos-unstable 7.1
- nixpkgs-unstable 7.1
- nixos-unstable-small 7.1
nixos-25.11 7.1
- nixos-25.11-small 7.1
- nixpkgs-25.11-darwin 7.1

pkgs.mercurialFull

Fast, lightweight SCM system for very large distributed projects

nixos-unstable 7.1
- nixpkgs-unstable 7.1
- nixos-unstable-small 7.1
nixos-25.11 7.1
- nixos-25.11-small 7.1
- nixpkgs-25.11-darwin 7.1

pkgs.python312Packages.mercurial

Fast, lightweight SCM system for very large distributed projects

nixos-25.11 7.1
- nixos-25.11-small 7.1
- nixpkgs-25.11-darwin 7.1

pkgs.python313Packages.mercurial

Fast, lightweight SCM system for very large distributed projects

nixos-unstable 7.1
- nixpkgs-unstable 7.1
- nixos-unstable-small 7.1
nixos-25.11 7.1
- nixos-25.11-small 7.1
- nixpkgs-25.11-darwin 7.1

pkgs.python314Packages.mercurial

Fast, lightweight SCM system for very large distributed projects

nixos-unstable 7.1
- nixpkgs-unstable 7.1
- nixos-unstable-small 7.1

Package maintainers

@lukegb Luke Granger-Brown <nix@lukegb.com>
@pacien euxane <r9uhdi.nixpkgs@euxane.eu>
@techknowlogick techknowlogick <techknowlogick@gitea.com>

1