suse · CVE-2018-13347

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-13347 severity moderate: SUSE including 15 source package names (emacs-mercurial-2.6.2-10.el7, emacs-mercurial-el-2.6.2-10.el7, …), 23 product×package rows across 18 product lines (SUSE Liberty Linux 7, SUSE Linux Enterprise Module for Basesystem 15 SP4, … (18 product lines)): Fixed 23.

Description:

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.