Gentoo Linux Security Advisory GLSA 200807-09 – Jakub Wilk discovered a directory traversal vulnerability in the applydiff() function in the mercurial/patch.py file. Versions less than 1.0.1-r2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68225/glsa-200807-09.txt
Source: https://packetstormsecurity.com/files/68225/Gentoo-Linux-Security-Advisory-200807-9.html