CVE ID:	CVE-2019-3902
Description:	A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
Test IDs:	1.3.6.1.4.1.25623.1.0.892293   1.3.6.1.4.1.25623.1.0.853236   1.3.6.1.4.1.25623.1.1.10.2019.0250   1.3.6.1.4.1.25623.1.0.844126   1.3.6.1.4.1.25623.1.1.4.2020.1709.1   1.3.6.1.4.1.25623.1.1.4.2020.1709.2   1.3.6.1.4.1.25623.1.0.853233   1.3.6.1.4.1.25623.1.0.891764
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3902 https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.9_.282019-02-01.29 https://lists.debian.org/debian-lts-announce/2019/04/msg00024.html https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html https://usn.ubuntu.com/4086-1/