1113362 - Deploy Mercurial 3.2.3

Status: RESOLVED FIXED

Description

[Gregory Szorc [:gps]]

A Git/Mercurial security vulnerability was released today. Issue deals with path normalization and character folding.

It isn't clear that deploying 3.2.3 to the server will prevent malicious pushes. But having 3.2.3 on the server is still a good idea, to prevent us from client-side exposure to the issue.

Comment 1

[Gregory Szorc [:gps]]

hg.mozilla.org is now running 3.2.3.

That was easy.