Format: 1.8
Date: Mon, 26 Nov 2018 17:38:17 -0200
Source: mercurial
Binary: mercurial-common mercurial
Architecture: all amd64
Version: 4.5.3-1ubuntu2.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-020.buildd>
Changed-By: Eduardo Barretto <eduardo.barretto@canonical.com>
Description:
 mercurial  - easy-to-use, scalable distributed version control system
 mercurial-common - easy-to-use, scalable distributed version control system (common
Changes:
 mercurial (4.5.3-1ubuntu2.1) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Integer underflow and overflow.
     - debian/patches/CVE-2018-13347.patch: Protect against underflow.
     - debian/patches/CVE-2018-13347-extras.patch: Protect against overflow.
     - CVE-2018-13347
   * SECURITY UPDATE: Able to start fragment past of the end of original data.
     - debian/patches/CVE-2018-13346.patch: Ensure fragment start is not past
       then end of orig.
     - CVE-2018-13346
   * SECURITY UPDATE: Data mishandling in certain situations.
     - debian/patches/CVE-2018-13348.patch: Be more careful about parsing
       binary patch data.
     - CVE-2018-13348
Checksums-Sha1:
 d329e004b0131f3cfaa13b155b532e14ba611c40 2198304 mercurial-common_4.5.3-1ubuntu2.1_all.deb
 02278ae208a46b2042cf70d4e951c0e6f24de22c 625212 mercurial-dbgsym_4.5.3-1ubuntu2.1_amd64.ddeb
 a4aabd43418d21579779f874f94f3d9d9b16be60 6990 mercurial_4.5.3-1ubuntu2.1_amd64.buildinfo
 4c5550cbc7b990788c5cea16ef3b790ef05517be 189284 mercurial_4.5.3-1ubuntu2.1_amd64.deb
Checksums-Sha256:
 537693dae1c193c724da306e3669f8561cff5cf594863b8746c3b44f66a28616 2198304 mercurial-common_4.5.3-1ubuntu2.1_all.deb
 c3bd9d4bf46b5c0b520249e4b508aead58820ff4bbcaac010d27d432a0c725f8 625212 mercurial-dbgsym_4.5.3-1ubuntu2.1_amd64.ddeb
 35d7072f20a1fcd036dfc2402160312f1e4d41b71a5fcf9237c3ee6629019630 6990 mercurial_4.5.3-1ubuntu2.1_amd64.buildinfo
 b78465669b0e3acdebead196881a617091b0acbc0fac488220361225db8642d8 189284 mercurial_4.5.3-1ubuntu2.1_amd64.deb
Files:
 6d55161d22f8e62502c62f4489c56e5e 2198304 vcs optional mercurial-common_4.5.3-1ubuntu2.1_all.deb
 b41e0382af5a15572fb2f78a2b342588 625212 debug optional mercurial-dbgsym_4.5.3-1ubuntu2.1_amd64.ddeb
 b9551ed4127e41d1f462b55becd89295 6990 vcs optional mercurial_4.5.3-1ubuntu2.1_amd64.buildinfo
 a1f1b2d0f456507249e44f1dfe223da8 189284 vcs optional mercurial_4.5.3-1ubuntu2.1_amd64.deb
Original-Maintainer: Python Applications Packaging Team <python-apps-team@lists.alioth.debian.org>