Debian Package Tracker

general

source: mercurial (main)
version: 5.2.1-1
maintainer: Python Applications Packaging Team (archive) (DMD)
uploaders: Javi Merino [DMD] – Tristan Seligmann [DMD] – Vincent Danjean [DMD]
arch: all any
std-ver: 4.0.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.1.2-2+deb8u4
o-o-sec: 3.1.2-2+deb8u7
oldstable: 4.0-1+deb9u1
old-sec: 4.0-1+deb9u1
stable: 4.8.2-1+deb10u1
testing: 5.2.1-1
unstable: 5.2.1-1

versioned links

3.1.2-2+deb8u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.1.2-2+deb8u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.1.2-2+deb8u7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0-1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.8.2-1+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.2.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

mercurial (15 bugs: 0, 7, 8, 0)
mercurial-common (5 bugs: 0, 5, 0, 0)

action needed

Debci reports failed tests high

unstable: pass (log)
The tests ran in 1:08:51
Last run: 2019-12-08 19:48:50 UTC
Previous status: fail

testing: fail (log)
The tests ran in 1:08:58
Last run: 2019-12-06 05:41:46 UTC
Previous status: fail

stable: fail (log)
The tests ran in 0:00:39
Last run: 2019-08-25 02:31:33 UTC
Previous status: fail

Created: 2019-02-07 Last update: 2019-12-10 12:10

6 security issues in stretch high

There are 6 open security issues in stretch.

6 important issues:

CVE-2018-13348: The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.
CVE-2018-13346: The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
CVE-2018-1000132: Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1.
CVE-2017-17458: In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.
CVE-2018-13347: mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
CVE-2019-3902: A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

Please fix them.

Created: 2017-12-08 Last update: 2019-12-09 08:54

Depends on packages which need a new maintainer normal

The packages that mercurial depends on which need a new maintainer are:

mgdiff (#770236)
- Suggests: mgdiff

Created: 2019-11-22 Last update: 2019-12-10 12:07

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-04-04 Last update: 2019-12-10 11:38

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-09-24 Last update: 2019-12-10 09:32

19 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 192c5081b99367fe5b2fbaad47276f6423144422
Author: Julien Cristau <jcristau@debian.org>
Date:   Fri Dec 6 15:48:35 2019 +0100

    Upload to unstable

commit c9f7c24dedcd1d3c9e5053047e4ee456180f5cc1
Author: Julien Cristau <jcristau@debian.org>
Date:   Fri Dec 6 15:12:51 2019 +0100

    New upstream bugfix release.

commit cbc2c0a2bc056700cea2fddd5098ec53d9f99a19
Merge: c38dc645 94a17956
Author: Julien Cristau <jcristau@debian.org>
Date:   Fri Dec 6 14:49:49 2019 +0100

    Update upstream source from tag 'upstream/5.2.1'
    
    Update to upstream version '5.2.1'
    with Debian dir 07b9f8aec88c427756087b8897728506b3ab22c5

commit 94a17956947766a4a87d9abd9927251551497997
Author: Julien Cristau <jcristau@debian.org>
Date:   Fri Dec 6 14:49:22 2019 +0100

    New upstream version 5.2.1

commit c38dc645af90373cda56b02b2be56d265b00d0dd
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Nov 27 15:16:18 2019 +0100

    Bump hgsubversion Breaks.

commit 4a5913166b6175c85f5a1c7fc366df60884014d6
Author: Julien Cristau <jcristau@debian.org>
Date:   Thu Nov 7 14:55:12 2019 +0100

    Drop use_sensible_editor patch from series file too...

commit d22d2f6cf8b2d878c229a89b1d7398c221370446
Author: Julien Cristau <jcristau@debian.org>
Date:   Thu Nov 7 14:47:42 2019 +0100

    Drop deb_specific__use_sensible-editor.patch
    
    Replace it with a config snippet that sets default values for ui.editor
    and pager.pager.  Thanks to Augie Fackler and Denis Laxalde for the
    suggestion.

commit 14a61d9ce9817600a06da5d150b6c42dee4db39a
Author: Julien Cristau <jcristau@debian.org>
Date:   Thu Nov 7 12:06:31 2019 +0100

    autopkgtest: add clang-format dependency, list other optional dependencies that are currently disabled.

commit 756f9774cdebb2d4b25d91dff9b1dc2ba968cc1e
Author: Julien Cristau <jcristau@debian.org>
Date:   Thu Nov 7 12:01:11 2019 +0100

    proposed_upstream__correct-zeroconf-doc actually proposed upstream

commit acab6937635dde532e1c72a9bb84a8151b3e4aff
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Nov 6 22:11:35 2019 +0100

    for_upstream__dont_rm_usr_bin_python_when_running_testsuite.patch: drop, obsolete since 2014.

commit 15e7f6645a17c9758e903e531235034604ea4b68
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Nov 6 15:19:59 2019 +0100

    Upload to unstable

commit 209af93ad98e298412aba84bbc2f2370191577ed
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Nov 6 14:39:10 2019 +0100

    Bump changelog

commit 832fee87d0899cec02766a3a35161b6794205a36
Merge: 1ba15ac8 305a4409
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Nov 6 12:08:46 2019 +0100

    Update upstream source from tag 'upstream/5.2'
    
    Update to upstream version '5.2'
    with Debian dir 154245f8aea03f68a04980f9c850944763912a24

commit 305a440984e19493e98efb98bd140e7b03ed0a97
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Nov 6 12:08:20 2019 +0100

    New upstream version 5.2

commit 1ba15ac8e76a5890649f68fd0d273114d8cd557e
Author: Julien Cristau <jcristau@debian.org>
Date:   Sun Oct 27 15:58:58 2019 +0100

    Update test blacklist

commit 59b2c6899da630c739ff77d3fc28da25ca827622
Author: Julien Cristau <jcristau@debian.org>
Date:   Thu Oct 24 14:32:54 2019 +0200

    Upload to experimental

commit 69536323601da7eb3581cee6c1d87d52f8fe0fae
Author: Julien Cristau <jcristau@debian.org>
Date:   Wed Oct 23 15:57:34 2019 +0200

    New upstream release candidate, update patches

commit 479c99d2b484134fa186236215edd0fa6f60ead6
Merge: fee2d19e e77742bd
Author: Julien Cristau <jcristau@debian.org>
Date:   Mon Oct 21 18:18:57 2019 +0200

    Update upstream source from tag 'upstream/5.2_rc0'
    
    Update to upstream version '5.2~rc0'
    with Debian dir 411a73d5f2697982fe22c28616bba1cc53024299

commit e77742bdb2b4974dd409dbfcd204759c86d4ce0a
Author: Julien Cristau <jcristau@debian.org>
Date:   Mon Oct 21 18:18:31 2019 +0200

    New upstream version 5.2~rc0

Created: 2019-10-24 Last update: 2019-12-06 21:39

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.0.0).

Created: 2017-06-30 Last update: 2019-12-07 03:08

news

[rss feed]

[2019-12-09] mercurial 5.2.1-1 MIGRATED to testing (Debian testing watch)
[2019-12-06] Accepted mercurial 5.2.1-1 (source) into unstable (Julien Cristau)
[2019-11-12] mercurial 5.2-1 MIGRATED to testing (Debian testing watch)
[2019-11-06] Accepted mercurial 5.2-1 (source) into unstable (Julien Cristau)
[2019-10-24] Accepted mercurial 5.2~rc0-1 (source) into experimental (Julien Cristau)
[2019-09-20] mercurial 5.1.1-1 MIGRATED to testing (Debian testing watch)
[2019-09-06] Accepted mercurial 5.1.1-1 (source) into unstable (Julien Cristau)
[2019-09-05] Accepted mercurial 5.1-4 (source) into unstable (Julien Cristau)
[2019-09-03] Accepted mercurial 5.1-3 (source) into unstable (Julien Cristau)
[2019-08-22] Accepted mercurial 5.1-2 (source) into experimental (Julien Cristau)
[2019-08-16] Accepted mercurial 5.1-1 (source) into experimental (Julien Cristau)
[2019-07-24] mercurial 4.9-2 MIGRATED to testing (Debian testing watch)
[2019-05-30] mercurial 4.8.2-1+deb10u1 MIGRATED to testing (Debian testing watch)
[2019-05-28] Accepted mercurial 4.8.2-1+deb10u1 (source) into testing-proposed-updates (Julien Cristau)
[2019-04-25] Accepted mercurial 3.1.2-2+deb8u7 (source all amd64) into oldstable (Chris Lamb)
[2019-02-08] Accepted mercurial 4.9-2 (source) into unstable (Julien Cristau)
[2019-02-06] Accepted mercurial 4.9-1 (source) into unstable (Julien Cristau)
[2019-01-25] Accepted mercurial 4.9~rc0-1 (source) into experimental (Julien Cristau)
[2019-01-10] mercurial 4.8.2-1 MIGRATED to testing (Debian testing watch)
[2019-01-08] Accepted mercurial 4.8.2-1 (source) into unstable (Julien Cristau)
[2019-01-07] Accepted mercurial 4.8.1-3 (source) into unstable (Julien Cristau)
[2018-12-21] mercurial 4.8.1-2 MIGRATED to testing (Debian testing watch)
[2018-12-12] Accepted mercurial 4.8.1-2 (source) into unstable (Julien Cristau)
[2018-12-11] Accepted mercurial 4.8.1-1 (source) into unstable (Julien Cristau)
[2018-11-20] Accepted mercurial 4.8-2 (source) into unstable (Julien Cristau)
[2018-11-20] Accepted mercurial 4.8-1 (source) into unstable (Julien Cristau)
[2018-10-07] mercurial 4.7.2-1 MIGRATED to testing (Debian testing watch)
[2018-10-04] Accepted mercurial 4.7.2-1 (source) into unstable (Julien Cristau)
[2018-09-07] mercurial 4.7.1-1 MIGRATED to testing (Debian testing watch)
[2018-09-04] Accepted mercurial 4.7.1-1 (source) into unstable (Julien Cristau)

bugs [bug history graph]

all: 22 23
RC: 0
I&N: 13 14
M&W: 8
F&P: 1
patch: 1

links

homepage
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.8.2-1ubuntu4
26 bugs
patches for 4.8.2-1ubuntu4