-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 23 Dec 2014 16:01:50 +0100 Source: mercurial Binary: mercurial-common mercurial Architecture: source all amd64 Version: 3.1.2-2 Distribution: unstable Urgency: high Maintainer: Python Applications Packaging Team <python-apps-team@lists.alioth.debian.org> Changed-By: Javi Merino <vicho@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system mercurial-common - easy-to-use, scalable distributed version control system (common Closes: 773640 Changes: mercurial (3.1.2-2) unstable; urgency=high . * Fix "CVE-2014-9390: Errors in handling case-sensitive directories allow for remote code execution on pull" by adding patches from_upstream__encoding_add_hfsignoreclean_to_clean_out_HFS-ignored_characters.patch, from_upstream__pathauditor_check_for_codepoints_ignored_on_OS_X.patch, and from_upstream__pathauditor_check_for_Windows_shortname_aliases.patch (Closes: #773640) Checksums-Sha1: fdb10bc443c9b4df6e548c9d1f8897b31e921225 2245 mercurial_3.1.2-2.dsc 87136a9c966ac71be476fca9f79d357d3b12f975 46644 mercurial_3.1.2-2.debian.tar.xz 25d5525fa86adce65d3e4ecdcd1ce955377d4029 1598232 mercurial-common_3.1.2-2_all.deb d9a8e8a86ca4d9db5933753ebe07a800e6cf7f99 59900 mercurial_3.1.2-2_amd64.deb Checksums-Sha256: 6c951dddaee50880db324618700a5062c5d0791b57b443657c221d8f5a9d2ab9 2245 mercurial_3.1.2-2.dsc 5bcf0f922e1f52ab95a6b10e943879fb0652b27ab1f5c108b20fddc23873dfb1 46644 mercurial_3.1.2-2.debian.tar.xz c03c83e02517bf6b7d9fd5d18f1e7fc39bac797abfffd026fe6d353704dc5300 1598232 mercurial-common_3.1.2-2_all.deb 20d12ef4ba8591ecdab7c25511caddbd853de0453af776ee2e4bbbe3ef718ac1 59900 mercurial_3.1.2-2_amd64.deb Files: 24f6350a1977b3bca112fb41eeb6a7b8 2245 vcs optional mercurial_3.1.2-2.dsc f606643dadd74cb4067bd26c6dfd4722 46644 vcs optional mercurial_3.1.2-2.debian.tar.xz 835a5e6e347e600554ffd8b8408a90f9 1598232 vcs optional mercurial-common_3.1.2-2_all.deb 2737fe53315849bc9aac5bd2f8e6801b 59900 vcs optional mercurial_3.1.2-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUmZLbAAoJEAe0hFJ2jTgkMYkP/AwR6FJJKHn9f4pwnc8n6NWv f+5t/jMQS/BVS2x9qFPDv3XJ8djsxrdb8n8thuIQpAn65eEtV+Aws6Rbd5gZtBZQ YrTxbIx/gPBIG8tAcddsGN9mR8DfyNHb6fae4RTJnqOb17HL0ji1V4L/9LGnzjP0 AsnNUBaTtlw91iPs6bNNXMTWJ2d68Q+beL1AAqAs51AqN2zrLKJPOLHVZeeBTKHw wYiXl/XSrmz3DEo+meUDf/E+7iHkvq5hwOXY4Ihs8rmGPvuNt0XBQH14zTbng+53 TpqWA4VRVPlVxAmn3yv1HfAshef2ZH1iN0x/y2yybo6ve0uW9heJOtIxQmshw4x+ 0z+sH+fiRIhIThcauF6fzFIQ/tjOHqdsO/H7OlaWECx8ZgNxZy0X8YCjPLaNnALA ZRy1xCnlLi1i1C2H6QlxqBjDcON6yhzej7yDGQSiBoNfgdivc8XUjm9xAhVKld2Y nLNEun8aISNTg+RTbM3RLURCpkmizZ7r63Fv4hyiTTM8C+OR5xtNLQZZwfpB9XDQ PE+5+irl4/HvDvjt+BfuxHpTU93Y2TVDHkRhpo6Pm2brPaSMNL1Dy7JVN4ExhIEe 09CHWTPvUVXIvDmVTZN+ONKvz4JdxnPNLZ6cJw4ceMZSfvD+H+kuWyefgvkANJHH syIMV1JlhzYyzoe8qTC8 =x+nd -----END PGP SIGNATURE-----
