7125 important openSUSE Leap 42.2 Update This update for mercurial fixes the following issues: Mercurial was updated to 4.2.3, a security fix update for - CVE-2017-1000115: Incomplete symlink auditing allowed writing to files outside of the repository (boo#1053344) - CVE-2017-1000116: Client-side code execution via argument injection in SSH URLs (boo#1052696) mercurial-3.8.3-2.8.1.i586.rpm mercurial-3.8.3-2.8.1.src.rpm mercurial-debuginfo-3.8.3-2.8.1.i586.rpm mercurial-debugsource-3.8.3-2.8.1.i586.rpm mercurial-lang-3.8.3-2.8.1.noarch.rpm mercurial-3.8.3-2.8.1.x86_64.rpm mercurial-debuginfo-3.8.3-2.8.1.x86_64.rpm mercurial-debugsource-3.8.3-2.8.1.x86_64.rpm