-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Mar 2025 13:56:44 +0100 Source: mercurial Binary: mercurial mercurial-dbgsym Architecture: mipsel Version: 6.3.2-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org> Changed-By: Julien Cristau <jcristau@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system Closes: 1100899 Changes: mercurial (6.3.2-1+deb12u1) bookworm-security; urgency=high . * CVE-2025-2361: reflected XSS in hgweb (closes: #1100899) * patchbomb: don't test ambiguous address (fixes FTBFS after python's fix for CVE-2023-27043). Checksums-Sha1: bedc34b6217e39c8dc3628d9df54d95935d02e36 1678120 mercurial-dbgsym_6.3.2-1+deb12u1_mipsel.deb cca74c7c1301e0efa3320ab1d045bbc62a5e31f8 7276 mercurial_6.3.2-1+deb12u1_mipsel-buildd.buildinfo 7e00f7401f0753770c1dcaf960a464b6b40f4d51 334656 mercurial_6.3.2-1+deb12u1_mipsel.deb Checksums-Sha256: a1c6efeb1bcc9dce7c97f91fd2a3acbdac2d456162750808d2ed991f6b47d228 1678120 mercurial-dbgsym_6.3.2-1+deb12u1_mipsel.deb be3cb07fb08a4f69c262798de7771f864dd130a08a362c327f244d980081ad53 7276 mercurial_6.3.2-1+deb12u1_mipsel-buildd.buildinfo 624a3017b730a6bcd9485c4048333fb127eee42de1b005e3f6d7e6688c52fac9 334656 mercurial_6.3.2-1+deb12u1_mipsel.deb Files: cf6fb159d594cdfaed4b57dcfde6bc03 1678120 debug optional mercurial-dbgsym_6.3.2-1+deb12u1_mipsel.deb 01125b6cb6856b49c902b8b79a579d84 7276 vcs optional mercurial_6.3.2-1+deb12u1_mipsel-buildd.buildinfo bab753309ede5ff8864a8bb3a4e72ca1 334656 vcs optional mercurial_6.3.2-1+deb12u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmfcdJ0ACgkQV4aVsMgl zVfNGhAAjV9mVNYkMDqhP0V/E1BHzXN7ZsOBBigPovIbUbHvsxfwmRV5p6BMmJtU xi87Xed+F+tG2B1OSJNXloHH+HpJSD5xoUzyk/ZaFSg3a+5WCDYWPPQKMKsh2il4 NNHBvtXMEqqsRVhVUvUWBGx3LJwgATPsFwq0jt1YzN2zNLJyXa0lJZ/40C0rYfgB xoVBPortaLlJYjPjJsJBvP/CdMyeaIvTVRBUrsRXgVzWiEgFPEDr0Fp2eCyw7C2Y fDTnz2TeJHqu0Jn7M1RUCkHiFpIrm/OQY/0TeZ9v6k8Q06bb8T4rgE23+CskMeg4 pZ7nhWJeVC08tAaLXlZlc8EzrcvbSUyp69cRrMffzxEtcYFCdZbYBAv2dRR1j+nH q0jPOOcsQ13pIN51tVH5iT6jPKEnmB7+OuQ2itpusaBIc+6+fdv/SUf0X9tDLGoP xUIfKycPnO9nxt96xNwCy2ur3YqG2/ddpS6PhtsPrdeS+s4B5F1L0sP1Yt2ZTlqD Zpayp2p0w0TJxAAZmMpTo1JQu4qRCWcb0CGxG9MAPaXHUYl4JrBZfWwcW0VNTBbw 9Gt4djsdmyhdOi2DHgHByUxnej8QvjAT5Nq5uN912OGRt50giOHVcXNk2ZF23v+Z xxZ7AaQVjAP4FeblW9m0C3N1gOosJUuZEtlx0KosMvPlvhMjCHo= =Kctc -----END PGP SIGNATURE-----