-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: mercurial Binary: mercurial-common, mercurial Architecture: any all Version: 3.1.2-2 Maintainer: Python Applications Packaging Team <[email protected]> Uploaders: Vincent Danjean <[email protected]>, Javi Merino <[email protected]>, Tristan Seligmann <[email protected]> Homepage: http://mercurial.selenic.com/ Standards-Version: 3.9.5 Vcs-Browser: http://anonscm.debian.org/viewvc/python-apps/packages/mercurial/trunk/ Vcs-Svn: svn://anonscm.debian.org/python-apps/packages/mercurial/trunk/ Testsuite: autopkgtest Build-Depends: debhelper (>= 9), patchutils (>= 0.2.25), gettext, python-all-dev (>= 2.6.6-3~), python-docutils, python-roman, zip, unzip, bash-completion, netbase Package-List: mercurial deb vcs optional arch=any mercurial-common deb vcs optional arch=all Checksums-Sha1: ae7e16454cee505da895c2497f09711f35287459 3983825 mercurial_3.1.2.orig.tar.gz 87136a9c966ac71be476fca9f79d357d3b12f975 46644 mercurial_3.1.2-2.debian.tar.xz Checksums-Sha256: 5dbe5ceb3707e378528dc9346af280919760aa1a8bcc27be12c1fe2bafa78d3a 3983825 mercurial_3.1.2.orig.tar.gz 5bcf0f922e1f52ab95a6b10e943879fb0652b27ab1f5c108b20fddc23873dfb1 46644 mercurial_3.1.2-2.debian.tar.xz Files: 72a79798de828d6d6fb055273f91201a 3983825 mercurial_3.1.2.orig.tar.gz f606643dadd74cb4067bd26c6dfd4722 46644 mercurial_3.1.2-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUmZG0AAoJEAe0hFJ2jTgkUB0P/0r1xVSlH90IDXkGSwyjwp8y eBS7mZC6HueWmSmNQuyWLLVN+qOAcfxSkER4QubPnGPafIuG7JhJHc6p8VbhVF7O kFTPBq7j0z5++4TdXNMK4d9hvi3avUTHsAxftdxKztin6xrIlwfHNiv8sb/rnBnU m5z2lWDERFy0d9yUMcp+D2fFtfn/a6uEsoWq681PK7ejblKnUEiUFi1H1NyPrJUr AcqjFtTv8mhd6mhu/zC8GavV5ewE1SNLFfG0bsuqgIEHTnDF3pkM6ZYN5ExqXL0f lCUzJFbTuXEJWGYyLxz7azZJMKV5oUyiMoUQdmHrtGxowf92iMCaNPu2QsuJ1SDw U81qkBxaMF6lXnWP5hsntKdmcwwSlZkJo4PQkUoaARVAjv0DXNxN6KsfY82g4HTc Td6YTa+zZQsHGNoq6tNR8J/PJbGo4LBF9QnMCRdR67YlkAQ63iK2IpncbYnc4tBf VT8G0/j3NuoSWkgxOHZ6PqjxTZQkSW1lYNSqx4KV2Mi3IxNjVuuaY97EqJqyCeo5 LWVhvPahC+ldup7Bs9oCS0tVUZ1jpEUNnqEQ6ssA40TEVqhd8qY01UGwWQOTcEIt AMoVawNelO4+4it8H827AjvrxwIbje7paheKKbM/P4KJ1abLbcqsUBFSHpQPm4zl WfbEkT+NLGPVSeelSO59 =8RUb -----END PGP SIGNATURE----- Changes: mercurial (3.1.2-2) unstable; urgency=high * Fix "CVE-2014-9390: Errors in handling case-sensitive directories allow for remote code execution on pull" by adding patches from_upstream__encoding_add_hfsignoreclean_to_clean_out_HFS-ignored_characters.patch, from_upstream__pathauditor_check_for_codepoints_ignored_on_OS_X.patch, and from_upstream__pathauditor_check_for_Windows_shortname_aliases.patch (Closes: #773640) -- Javi Merino <[email protected]> Tue, 23 Dec 2014 16:01:50 +0100