-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 Dec 2017 11:36:50 -0500 Source: mercurial Binary: mercurial-common mercurial Architecture: source all amd64 Version: 2.2.2-4+deb7u6 Distribution: wheezy-security Urgency: high Maintainer: Python Applications Packaging Team <python-apps-team@lists.alioth.debian.org> Changed-By: Roberto C. Sanchez <roberto@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system mercurial-common - easy-to-use, scalable distributed version control system (common Changes: mercurial (2.2.2-4+deb7u6) wheezy-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2017-17458: arbitrary code execution via craft subrepository Checksums-Sha1: 9bb8741aac6d44dca08d4f68aeb24166d0f9cbfb 2178 mercurial_2.2.2-4+deb7u6.dsc 17164ad2af0d08c0002c4ace1c99994865a4545f 61608 mercurial_2.2.2-4+deb7u6.debian.tar.gz ce2b11f06c0c0c811a77304b0d8f9d5481fc2908 2327064 mercurial-common_2.2.2-4+deb7u6_all.deb 84809a411f9df4c758e27f68f7aca8fdd879e15f 94030 mercurial_2.2.2-4+deb7u6_amd64.deb Checksums-Sha256: 5de6e0e678d712c3281095b0d7e28ccf4123a79cc46c4b73875364e215fab724 2178 mercurial_2.2.2-4+deb7u6.dsc 854c04f99eb46aa35f7d1013c199050e516e4de1956330a1698066f3bcb24845 61608 mercurial_2.2.2-4+deb7u6.debian.tar.gz 9094df299f6c83a02112dfe5b82a90bd9da97816de86052ccdaa83359f1f3994 2327064 mercurial-common_2.2.2-4+deb7u6_all.deb 5951aad24c3b5b130b461ec49b12118b82e6a5d6795a7a41b8f5c92947095890 94030 mercurial_2.2.2-4+deb7u6_amd64.deb Files: 1be0bc1d074d950f3cabb6eabca3830e 2178 vcs optional mercurial_2.2.2-4+deb7u6.dsc 1f0e66d48bc08d05f6b85848fa8fa173 61608 vcs optional mercurial_2.2.2-4+deb7u6.debian.tar.gz 7dfff4c5e273f96a85ed9071e2ea6ce3 2327064 vcs optional mercurial-common_2.2.2-4+deb7u6_all.deb f8ace7c4f8a88576da4f4b13c2c9855a 94030 vcs optional mercurial_2.2.2-4+deb7u6_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIYZ1DR4ae5UL01q7ldFmTdL1kUIFAlpFJf4ACgkQldFmTdL1 kUJzPQ/+P88hsi2GTIDr7OcCS/7bc+CVmLlW5O6OEUrHeAo4lla61GnHZneRAW1e C7y/4B0aYT8ZUmyFv394E9ssdbW4Cl7gTBRdhpoIBqS3Y7ly/vFpTXJXHvX8bhMq BSDyCYZ8BeM4OfyyrQu8kiyopcoWhSQ03h0WbzFQQR01uW8nvAUOPahLpOKv4NIn I7O3M2PpfJcuMrjOPvAy/dod3bjsMJ70UQV10xLtXqGM66Q70KCF2aW3r671/9+o EUxds5yjrmXIAo2PK5rb3k8RrBB9s9ZZkivjeqJwvw9AOkb4u4xnAfiPC44be7qG ccsrbzDKNwasH9roIIlly9I8DIPbJ1+g2ag5Z0/A45gwgnEDafiD4tx6yH/ed7YC ZJsdRnweNLGAsQ9c6/TJaj2xq/AtTGwMKFbAxNEU7QIO9fWIYreyGUTLYbJt5NBO E3Zj8DJTZ/d5Vhul7RJFI3ziMeAWsyEN3YInveR6MRAcHZuEp9SqWfSm/nyexzhE +N7AAtEWvktF8tnUYECiBRPUf6SQY3mRDXHt2eQLThEMIMPLrBj+8U5lku667giM 4q3qYMt2l12+fPcTQSRo1YULB3hyKTpngdleKZYjZghqwAZ5HIkpgf0DRR8ehz0h YYsKyM2SAFACeTpnkoek3Wcq04dPLt2QuPsPkPaLybw2NxpP3eo= =xvb5 -----END PGP SIGNATURE-----
