NOTE: there are actually 6 more patches required to completely fix bug #901050, see https://www.mercurial-scm.org/repo/hg-committed/log?rev=modifies%28%22mercurial%2Fmpatch.c%22%29+and+4.5%3A%3A
NOTE: upstream proposes we use OVE-20180430-0002 to cover all undefined behavior cases which the 6 patches fix
NOTE: there are actually 6 more patches required to completely fix bug #901050,
NOTE: see https://www.mercurial-scm.org/repo/hg-committed/log?rev=modifies%28%22mercurial%2Fmpatch.c%22%29+and+4.5%3A%3A
NOTE: upstream proposes we use OVE-20180430-0002 to cover all undefined behavior
NOTE: cases which the 6 patches fix
CVE-2018-XXXX [OVE-20180430-0001: mpatch: be more careful about parsing binary patch data]