StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · mercurial

`mercurial` CVE matrix across Linux distros

67 CVEs tracked across 8 distro releases. Showing the 67 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2008-2942→ fixed in1.0.1-2
CVE-2008-4297→ fixed in1.0.1-5.1
CVE-2010-4237→ fixed in1.6.4-1
CVE-2014-9390→ fixed in3.1.2-2
CVE-2014-9462→ fixed in3.4-1
CVE-2016-3068→ fixed in3.7.3-1
CVE-2016-3069→ fixed in3.7.3-1
CVE-2016-3105→ fixed in3.8.1-1
+12 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y mercurial

Debian bookworm

Source: Debian

CVE-2008-2942→ fixed in1.0.1-2
CVE-2008-4297→ fixed in1.0.1-5.1
CVE-2010-4237→ fixed in1.6.4-1
CVE-2014-9390→ fixed in3.1.2-2
CVE-2014-9462→ fixed in3.4-1
CVE-2016-3068→ fixed in3.7.3-1
CVE-2016-3069→ fixed in3.7.3-1
CVE-2016-3105→ fixed in3.8.1-1
+12 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y mercurial

Debian trixie

Source: Debian

CVE-2008-2942→ fixed in1.0.1-2
CVE-2008-4297→ fixed in1.0.1-5.1
CVE-2010-4237→ fixed in1.6.4-1
CVE-2014-9390→ fixed in3.1.2-2
CVE-2014-9462→ fixed in3.4-1
CVE-2016-3068→ fixed in3.7.3-1
CVE-2016-3069→ fixed in3.7.3-1
CVE-2016-3105→ fixed in3.8.1-1
+12 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y mercurial

Alpine v3.20

Source: Alpine secdb

CVE-2019-3902→ fixed in4.9-r0

Single command to patch all of these:

apk add --upgrade mercurial

Alpine v3.21

Source: Alpine secdb

CVE-2019-3902→ fixed in4.9-r0
CVE-2025-2361→ fixed in6.9.4-r0

Single command to patch all of these:

apk add --upgrade mercurial

Alpine edge

Source: Alpine secdb

CVE-2019-3902→ fixed in4.9-r0
CVE-2025-2361→ fixed in6.9.4-r0

Single command to patch all of these:

apk add --upgrade mercurial

Alpine v3.18

Source: Alpine secdb

CVE-2019-3902→ fixed in4.9-r0

Single command to patch all of these:

apk add --upgrade mercurial

Alpine v3.19

Source: Alpine secdb

CVE-2019-3902→ fixed in4.9-r0

Single command to patch all of these:

apk add --upgrade mercurial

Is YOUR mercurial patched?

5-second check on your actual server. The quickscan reads your installed mercurial version and matches against the same 67-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)