mercurial openSUSE 11.0 The hgweb script didn't enforce the 'allowpull' permission setting which allowed anyone to retrieve files from the repository (CVE-2008-4297) mercurial-1.0-30.4.i586.rpm mercurial-1.0-30.4.ppc.rpm mercurial-1.0-30.4.x86_64.rpm