-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 23 Dec 2014 12:42:20 +0100 Source: mercurial Binary: mercurial-common mercurial Architecture: source all amd64 Version: 2.2.2-4 Distribution: stable Urgency: high Maintainer: Python Applications Packaging Team <python-apps-team@lists.alioth.debian.org> Changed-By: Javi Merino <vicho@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system mercurial-common - easy-to-use, scalable distributed version control system (common Changes: mercurial (2.2.2-4) stable; urgency=high . * Security update for CVE-2014-9390: errors in handling case-sensitive directories allow for remote code execution on pull. Checksums-Sha1: 53bba9e6c4e2ca6dbeb272707b983da25e0d28db 2136 mercurial_2.2.2-4.dsc 84791cb84ea8ddbdc3ff42f1d134ed5955a9e4d3 40775 mercurial_2.2.2-4.debian.tar.gz 09c0a664a4b1f023031136c0f2ddf656f3002c9f 2325406 mercurial-common_2.2.2-4_all.deb 120d59b4730c1adfd8729f67dc3f1487b6498c5c 93438 mercurial_2.2.2-4_amd64.deb Checksums-Sha256: 2259d6bb8b455a870b7e82a060f25e6e35e87639727f54a627c19c3ecc69a237 2136 mercurial_2.2.2-4.dsc 10712347deb29044185a840232272405990b1a0f24b46588469f5291446e6c17 40775 mercurial_2.2.2-4.debian.tar.gz f24e131b848b196706b82b9d98de23147a2109edeed5d9d9739cf12abe3b9669 2325406 mercurial-common_2.2.2-4_all.deb 7dd9ef5cd92863c69c0fcdc21e0fd228d18c12b92920712eb5afae2cab46b12a 93438 mercurial_2.2.2-4_amd64.deb Files: db93ad5dd1a6a03f2d383491f109f395 2136 vcs optional mercurial_2.2.2-4.dsc b1ad80958083790807eec4ca0a9c5e23 40775 vcs optional mercurial_2.2.2-4.debian.tar.gz da4f004b9d61cc30745e7967f716ab5f 2325406 vcs optional mercurial-common_2.2.2-4_all.deb af4425875e68e3325a8d9cd67a8ad9b4 93438 vcs optional mercurial_2.2.2-4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUzkC6AAoJEAe0hFJ2jTgkpcQQAMHvpn4/PXTYDdXaldXheaiJ osoLJUJMKnpPUjZrK5SzVraU3tLLZhENur3lMYyRRm9/PN40loQREiGJrirwMBvU if8ANvWfzq8ABWZ2KWEn7rRjAhg8UFagmY9nO+BRAp38AJ98wM3wYHa3wFjLtjE8 olGHGD9Nhmv9nqKI9bNCoFawVvFwPqcyUsPnVCVyqbzbNVnDNbJtiaMAXkTubSfq f5yqR5cGwDyS9XX3RRt09izdWviNw2IN049t1oSBTrcwVDe9GfRaNCF8YcuJLoOd IkRs28y4ZbS4MlfPDq9Eo2jUM2Gl3/u2tJAOPG5TEXjsLqrTOHLhYER22+wC1GB9 N0eBdyo32K1Dm2JPTiHRepurB4ALxFSGzXap3lrd0x+b9Qbq1GX/qtfvuI5pyKHW 2l4AYfImgmIoSvPb5KDTXc2T3OmKKCxF4l/SjzVFllc5mjqqWzBQA9CcUfxEEwYP 217/LxS0TDqoctX4qNE0VEczUcL7yhm8e3uTKIbH2rO7auw7WWHPNjA8s9H6+My8 aUSgNoc6psXGuI04qcWnrCYguBetJljfM8rSgW5RRrdqvA1c7Bs0kKVhgBZIhgJA MAgnS9TJxHT/yyMu805zTQC0lE8QtSpiWIxw7+xQcsv3CLc7s3Li8tcDgyHLA3KK K9HLwOQFZp0nymsHPmCN =tucU -----END PGP SIGNATURE-----
