-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 27 Jul 2018 13:07:56 -0400 Source: mercurial Binary: mercurial-common mercurial Architecture: source all amd64 Version: 3.1.2-2+deb8u6 Distribution: jessie-security Urgency: medium Maintainer: Python Applications Packaging Team <python-apps-t...@lists.alioth.debian.org> Changed-By: Antoine Beaupré <anar...@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system mercurial-common - easy-to-use, scalable distributed version control system (common Changes: mercurial (3.1.2-2+deb8u6) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * incomplete fix for CVE-2017-17458: backport upstream commits 846942fd6d15, 828cf35f1de6, and 5e27afeddaee to disable subrepos per type and disable all subrepos but hg by default. Checksums-Sha1: bcf5da65ab1d921d1a56dbd6bd786320b50988d2 1942 mercurial_3.1.2-2+deb8u6.dsc 1c1d50a0f56e49d5cc6584a9dbaaf42262cf392c 73872 mercurial_3.1.2-2+deb8u6.debian.tar.xz be01da61327ef1d690ad71ff9e22beef39fdd875 1604894 mercurial-common_3.1.2-2+deb8u6_all.deb 0741804f49284fbf8b5deeb3b60b799aa57b13d3 61094 mercurial_3.1.2-2+deb8u6_amd64.deb Checksums-Sha256: 685ec88bd2946974a35d35679b5d012b8874553799736c66c7c3b1e54b56653c 1942 mercurial_3.1.2-2+deb8u6.dsc 620183effa4dcb23a4318a9909b3f1e25e0515c79a01284ff1461cb86c01598a 73872 mercurial_3.1.2-2+deb8u6.debian.tar.xz 201a047b849f0e5b6aeeeb925b807d40086a487f1c8b799e0beee8e6b6a32b4d 1604894 mercurial-common_3.1.2-2+deb8u6_all.deb fe8eb1c82a29045c034f897aa686870de38abf53ef30895ffa30b1541ac50aed 61094 mercurial_3.1.2-2+deb8u6_amd64.deb Files: 4dd0e548a4cfe3353d6103858284440e 1942 vcs optional mercurial_3.1.2-2+deb8u6.dsc 818cfc12070f6b18f5e8c9b06463d6c5 73872 vcs optional mercurial_3.1.2-2+deb8u6.debian.tar.xz 23c07f7f94015c379824ec2edec955c4 1604894 vcs optional mercurial-common_3.1.2-2+deb8u6_all.deb 22f69741c3512b1d40edb90080708990 61094 vcs optional mercurial_3.1.2-2+deb8u6_amd64.deb
-----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEexZCBNCWcjsBljWrPqHd3bJh2XsFAltbXP8ACgkQPqHd3bJh 2Xv/mgf8DZx8XfkZn+6PH9xck9Ptl1hXoEinJbxB5jSoFTJLzDn7jL2AG3ENoQPi zQwUfL/nZpUyCZuMEQqNJv3VjUS+jZ8ww3Ohfk8D6Oi0BKPAdjYlbMDnaIwhZtQl 5Iqsvc3xGAJZjqGdWT26YXJfT0aCl8FS0gy6VWWKr2LGx4K+k+ao8g9ye7CeIldr hr5epZGqGUHHDl12RN8cyzBGcd8J3XONARY8XLbr9VuiHLVlRQQycWGSKkHgimGf dzwjxuoY7AuEr//NkLknjaRzp6Ic8SW4A5a4LZRFQ0Mx36YfKLT8Ty/mbUb5FlJH srFpeli4uTgXDZQ7YECTNTNFFaAZWA== =z6nQ -----END PGP SIGNATURE-----