Accepted mercurial 2.2.2-4 (source all amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 23 Dec 2014 12:42:20 +0100
Source: mercurial
Binary: mercurial-common mercurial
Architecture: source all amd64
Version: 2.2.2-4
Distribution: stable
Urgency: high
Maintainer: Python Applications Packaging Team <python-apps-team@lists.alioth.debian.org>
Changed-By: Javi Merino <vicho@debian.org>
Description:
mercurial - easy-to-use, scalable distributed version control system
mercurial-common - easy-to-use, scalable distributed version control system (common
Changes:
mercurial (2.2.2-4) stable; urgency=high
.
* Security update for CVE-2014-9390: errors in handling case-sensitive
directories allow for remote code execution on pull.
Checksums-Sha1:
53bba9e6c4e2ca6dbeb272707b983da25e0d28db 2136 mercurial_2.2.2-4.dsc
84791cb84ea8ddbdc3ff42f1d134ed5955a9e4d3 40775 mercurial_2.2.2-4.debian.tar.gz
09c0a664a4b1f023031136c0f2ddf656f3002c9f 2325406 mercurial-common_2.2.2-4_all.deb
120d59b4730c1adfd8729f67dc3f1487b6498c5c 93438 mercurial_2.2.2-4_amd64.deb
Checksums-Sha256:
2259d6bb8b455a870b7e82a060f25e6e35e87639727f54a627c19c3ecc69a237 2136 mercurial_2.2.2-4.dsc
10712347deb29044185a840232272405990b1a0f24b46588469f5291446e6c17 40775 mercurial_2.2.2-4.debian.tar.gz
f24e131b848b196706b82b9d98de23147a2109edeed5d9d9739cf12abe3b9669 2325406 mercurial-common_2.2.2-4_all.deb
7dd9ef5cd92863c69c0fcdc21e0fd228d18c12b92920712eb5afae2cab46b12a 93438 mercurial_2.2.2-4_amd64.deb
Files:
db93ad5dd1a6a03f2d383491f109f395 2136 vcs optional mercurial_2.2.2-4.dsc
b1ad80958083790807eec4ca0a9c5e23 40775 vcs optional mercurial_2.2.2-4.debian.tar.gz
da4f004b9d61cc30745e7967f716ab5f 2325406 vcs optional mercurial-common_2.2.2-4_all.deb
af4425875e68e3325a8d9cd67a8ad9b4 93438 vcs optional mercurial_2.2.2-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=tucU
-----END PGP SIGNATURE-----
Reply to: