A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
| Software | From | Fixed in |
|---|---|---|
| mercurial / mercurial | - | 4.9 |
| redhat / enterprise_linux | 7.0 | 7.0.x |
| debian / debian_linux | 8.0 | 8.0.x |