Debian Linux Security Advisory 3570-1 - Blake Burkhart discovered an arbitrary code execution flaw in Mercurial, a distributed version control system, when using the convert extension on Git repositories with specially crafted names. This flaw in particular affects automated code conversion services that allow arbitrary repository names.
5ee35477cc8c27ba9e76dbf6cf3f79be71dfe919bab4cfba87ba09a641932ade