-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 26 Mar 2018 13:56:31 -0400 Source: mercurial Binary: mercurial-common mercurial Architecture: source all amd64 Version: 2.2.2-4+deb7u7 Distribution: wheezy-security Urgency: medium Maintainer: Python Applications Packaging Team <python-apps-team@lists.alioth.debian.org> Changed-By: Antoine Beaupré <anarcat@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system mercurial-common - easy-to-use, scalable distributed version control system (common Closes: 892964 Changes: mercurial (2.2.2-4+deb7u7) wheezy-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Fix non-deterministic build test suite failure introduced in CVE-2017-1000116, spotted by Chris Lamb * CVE-2018-1000132: Incorrect Access Control vulnerability in Protocol server that can result in Unauthorized data access (Closes: #892964) Checksums-Sha1: b0f63f7cbff2822e1ccc2fa4f88454764f9b7340 1833 mercurial_2.2.2-4+deb7u7.dsc 26d70c61a89f0e68dcab2077ef26d85192d1fe9c 68730 mercurial_2.2.2-4+deb7u7.debian.tar.gz c2fe0b31fc0ad6ecdf7c1c4f9227e65ad4388e3c 2325194 mercurial-common_2.2.2-4+deb7u7_all.deb a5b8263f7e4de9f81e9835bf177fc8cdb53e0b57 94018 mercurial_2.2.2-4+deb7u7_amd64.deb Checksums-Sha256: f01e53b02fcb10b57cb55e22bfb27eead48c8db3436a38cc1f7d6af5bbf50102 1833 mercurial_2.2.2-4+deb7u7.dsc 641b838431390d3cdc4e3a1102ecb620534e5dde1e91ea319237765ace7e314b 68730 mercurial_2.2.2-4+deb7u7.debian.tar.gz 277be344f6fbb3c277bd89b72e2daf2021773960e7c3ebcac15ce965c6da6c01 2325194 mercurial-common_2.2.2-4+deb7u7_all.deb a9bc7445b55b76e6e664d98478147da15b13df1fbcf2716c37533fbc2309d957 94018 mercurial_2.2.2-4+deb7u7_amd64.deb Files: 1cd3dcd517c36c3bdacd94814c1edb93 1833 vcs optional mercurial_2.2.2-4+deb7u7.dsc 8aafd7420d4c408479c6a002bf3b2695 68730 vcs optional mercurial_2.2.2-4+deb7u7.debian.tar.gz 375ab66f95f8626e66e0f3887bc0f48a 2325194 vcs optional mercurial-common_2.2.2-4+deb7u7_all.deb d0f331549d5b9f3554e1978beda74899 94018 vcs optional mercurial_2.2.2-4+deb7u7_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEexZCBNCWcjsBljWrPqHd3bJh2XsFAlq+VLEACgkQPqHd3bJh 2XuU2wf9FITM+HE1YXajoLPb0mgGzMGNs84YsPEaP2QyUDXgr28zHbHXIuORSGWD FLafQ6VmFogHKZLLm++YqwaTIvhjSXt61WrWsOvKGXLxp5Aj+6iQhpaGRgEEJHZn MpjqwLvjUTBF/RGdTeqSi4Xw1rtLDq0qconRuBalZARmUDRk9ZXaP5MpfcnIj1wJ jMr7vFucoRjZE6duxMuW9tdbY5Yt4nurzUDoBPcUX7tFDKkJgLR7NAqa1oui5M0w FghWhlQ2FRXFGAkzqhx6gCtjYUeNLvoQUp4nb0ugnLqxiHFbss//fBHWtaADKRfa iW6rZ1SFNHm1qwLla+UU7SnT3uXYWA== =swJ5 -----END PGP SIGNATURE-----