-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Mar 2025 13:56:44 +0100 Source: mercurial Binary: mercurial mercurial-dbgsym Architecture: s390x Version: 6.3.2-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org> Changed-By: Julien Cristau <jcristau@debian.org> Description: mercurial - easy-to-use, scalable distributed version control system Closes: 1100899 Changes: mercurial (6.3.2-1+deb12u1) bookworm-security; urgency=high . * CVE-2025-2361: reflected XSS in hgweb (closes: #1100899) * patchbomb: don't test ambiguous address (fixes FTBFS after python's fix for CVE-2023-27043). Checksums-Sha1: 61e7adba2001d1ac587e59c3a4bef36d1f27896d 1576484 mercurial-dbgsym_6.3.2-1+deb12u1_s390x.deb b2c7e6374ef3e9dff3edcbc81ec3d8808d639992 7358 mercurial_6.3.2-1+deb12u1_s390x-buildd.buildinfo 2f945bf24a46bddbec73111c61289a65ce82eb53 297344 mercurial_6.3.2-1+deb12u1_s390x.deb Checksums-Sha256: 9330e5cf88e4e586499640a92fcd077401de8514cfa53380d66b74857a22b8c9 1576484 mercurial-dbgsym_6.3.2-1+deb12u1_s390x.deb 6c9aa8b096a20d2b9a87f0040f99837af602dd0c1c2b24b0dc5ebdb3b6960188 7358 mercurial_6.3.2-1+deb12u1_s390x-buildd.buildinfo 186e9472eb06386ad0c373cd07d43930a8d2ee86a76cb712fd4a650d12255f2f 297344 mercurial_6.3.2-1+deb12u1_s390x.deb Files: 9c7e3a9a76abec328e5c1bf3c197383e 1576484 debug optional mercurial-dbgsym_6.3.2-1+deb12u1_s390x.deb 28f07161eed21eb2971a14cec8b1d57f 7358 vcs optional mercurial_6.3.2-1+deb12u1_s390x-buildd.buildinfo a131f07ffcd1d8e130d36b6490b5dd57 297344 vcs optional mercurial_6.3.2-1+deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZTC4/c20pi1/n7UBUhVQ83ojQ7QFAmfcZHAACgkQUhVQ83oj Q7Q7pg/+KQf7uN46V+x0Xg94XWXqmsV+MChPlmdR4mpb1+GhSMJBB6KLD8aJcCmK OLn9PG3QvMIE8J2q4PWMuW4+fnmWTdlwsLvDwB37v0TKnWfP6Q8W414Z/0mqQtMO rn7llr7mNHoaEAt4mvhiWf4w6rMYefnDfl174BGs8Ee2yyo9f0lMca09z7P64pGs A8Za9m6mbF86Kel2o6I2C6RFbm2HYJo6i/95RcJs0fyXGm0hs0rydMOsqb/NBXQA k8dIjsI9AznvqKQjAPwWcWlqiY8Ui2OAXGrzjVSpdBTzBn9/qyNYxtwZcue8z/g6 u9Hj0CGdBVRKjK3774PTPG/ScXx/+kZlYFaGrGtHOnW2XRfRmOw302d6Iz3SBsSS VUCTh+F03+ZcGMCHXI6X+U7D95ymbI0q2lqA3s7twostNpWk13klsU0XDqKI0Ada sL7agf3YFWUdJAuVjZUpGO2j54uf5LdB/dUEA+hqC0BPLJZx4H568CzxSM1/urvo YOBG1XUH69YCJUoPFVVWR9SnxssmY8NCh+KwNDy61dpEOPjLcn9ZkDyuJzsMczE3 YH+AIkd2NblUa+XfyeVd+Avea3LomaEuLajftbwfqJRdECzFcv/V3Qax++m63kgt 6G6KMigvTBipjnE0TZRL13AhF2rRXL9CtjYBaXrAiv3WYNhwT6E= =zpr4 -----END PGP SIGNATURE-----