Re: request for CVEs for git clients

[Julien Cristau <jcristau () debian org>]

On Thu, Dec 18, 2014 at 16:34:22 -0800, Russ Allbery wrote:

> Kurt Seifried <kseifried () redhat com> writes:
>
> > Ah my bad, I saw the blog entry, didn't read the git announcement -
> > CVE-2014-9390
>
> My understanding is that this bug also affects Mercurial.  I'm not sure if
> it should get its own separate CVE (or possibly already has).
http://mercurial.selenic.com/wiki/WhatsNew#Mercurial_3.2.3_.282014-12-18.29
uses that same CVE-2014-9390 id.

Cheers,
Julien