-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 27 Mar 2025 19:23:02 +0100
Source: mercurial
Architecture: source
Version: 5.6.1-4+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Closes: 1100899
Changes:
mercurial (5.6.1-4+deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS Security Team.
.
[ Andreas Henriksson ]
* Cherry-pick and massage bookworm (stable) patches by jcristau to apply
on bullseye version of the package.
.
[ Julien Cristau ]
* CVE-2025-2361: reflected XSS in hgweb (closes: #1100899)
* patchbomb: don't test ambiguous address
(fixes FTBFS after python's fix for CVE-2023-27043).
Checksums-Sha1:
c6fdb3750f35ef3f0caa93797a3bbbec368d4009 2517 mercurial_5.6.1-4+deb11u1.dsc
4eb123b30c2331ce39518650a9095e7e1ec8c542 7836342 mercurial_5.6.1.orig.tar.gz
d0a68a9feefe4394af77b364ba1c8f5361d33ec5 68180 mercurial_5.6.1-4+deb11u1.debian.tar.xz
b6c6f6f9e046a66b7e90ff0a9d05d055e003c9ab 8013 mercurial_5.6.1-4+deb11u1_source.buildinfo
Checksums-Sha256:
0ae9602ee9ef4b5200e33e2d0f300aa9c51822982002ac384d00d59402235c0a 2517 mercurial_5.6.1-4+deb11u1.dsc
e55c254f4904c45226a106780e57f4279aee03368f6ff6a981d5d2a38243ffad 7836342 mercurial_5.6.1.orig.tar.gz
1b356794f1be79ef77ffbce88fb28e5553f159cb1f28856166c5b44533987047 68180 mercurial_5.6.1-4+deb11u1.debian.tar.xz
87ff95bfbdd0b7c6b74f7055d81e2e5623ace0193dfb17ee5030c74bbb5cddbc 8013 mercurial_5.6.1-4+deb11u1_source.buildinfo
Files:
3e7427f6e4f7859198fcbc7429cf0da3 2517 vcs optional mercurial_5.6.1-4+deb11u1.dsc
6cd6e5476a1de5701e162aba51534f0b 7836342 vcs optional mercurial_5.6.1.orig.tar.gz
b3b996592e798feb346d7648fb82222e 68180 vcs optional mercurial_5.6.1-4+deb11u1.debian.tar.xz
9a4dd68e95dd4b3a10d960d7bf1d3cb9 8013 vcs optional mercurial_5.6.1-4+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=3QJo
-----END PGP SIGNATURE-----
Attachment:
pgpHO7uI0gqpd.pgp
Description: PGP signature