Format: 1.8 Date: Wed, 17 Jun 2015 13:09:05 -0400 Source: mercurial Binary: mercurial-common mercurial Architecture: armhf Version: 3.1.1-1ubuntu0.2 Distribution: utopic Urgency: medium Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: mercurial - easy-to-use, scalable distributed version control system mercurial-common - easy-to-use, scalable distributed version control system (common Launchpad-Bugs-Fixed: 1404035 Changes: mercurial (3.1.1-1ubuntu0.2) utopic-security; urgency=medium . [ Jamie Strandboge ] * SECURITY UPDATE: fix for improperly handling case-insensitive paths on Windows and OS X clients - http://selenic.com/repo/hg-stable/rev/885bd7c5c7e3 - http://selenic.com/repo/hg-stable/rev/c02a05cc6f5e - http://selenic.com/repo/hg-stable/rev/6dad422ecc5a - CVE-2014-9390 - LP: #1404035 . [ Marc Deslauriers ] * SECURITY UPDATE: arbitrary command exection via crafted repository name in a clone command - d/p/from_upstream__sshpeer_more_thorough_shell_quoting.patch: add more thorough shell quoting to mercurial/sshpeer.py. - CVE-2014-9462 Checksums-Sha1: 35cac7efa1465b260fe8236db8d862f944881e9d 34140 mercurial_3.1.1-1ubuntu0.2_armhf.deb 71f2df9546da30452626a1da88e4ab65b01219b1 67556 mercurial-dbgsym_3.1.1-1ubuntu0.2_armhf.ddeb Checksums-Sha256: 458a815ea1cbfdda59599d362e4f1f5f70eacd3cd5635a85c898ff6f54b749c5 34140 mercurial_3.1.1-1ubuntu0.2_armhf.deb b5fbf796ddffd6b0b618084ac905765b73a1b4f1f85aaae76e638541148ea388 67556 mercurial-dbgsym_3.1.1-1ubuntu0.2_armhf.ddeb Files: 82a62302d39913875cadd9093746ac95 34140 vcs optional mercurial_3.1.1-1ubuntu0.2_armhf.deb ab3a65629c1fa9492ba540177457bb87 67556 vcs extra mercurial-dbgsym_3.1.1-1ubuntu0.2_armhf.ddeb Original-Maintainer: Python Applications Packaging Team