← Back to branch summary

~ubuntu-branches/ubuntu/trusty/mercurial/trusty-security

« back to all changes in this revision

Viewing changes to .pc/applied-patches

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers, Jamie Strandboge, Marc Deslauriers
  • Date: 2015-06-17 10:51:42 UTC
  • Revision ID: package-import@ubuntu.com-20150617105142-5pe4odmv44b1p509
Tags: 2.8.2-1ubuntu1.3
https://launchpad.net/bugs/1404035
[ Jamie Strandboge ]
* SECURITY UPDATE: fix for improperly handling case-insensitive paths on
  Windows and OS X clients
  - http://selenic.com/repo/hg-stable/rev/885bd7c5c7e3
  - http://selenic.com/repo/hg-stable/rev/c02a05cc6f5e
  - http://selenic.com/repo/hg-stable/rev/6dad422ecc5a
  - CVE-2014-9390
  - LP: #1404035

[ Marc Deslauriers ]
* SECURITY UPDATE: arbitrary command exection via crafted repository
  name in a clone command
  - d/p/from_upstream__sshpeer_more_thorough_shell_quoting.patch: add
    more thorough shell quoting to mercurial/sshpeer.py.
  - CVE-2014-9462
* debian/patches/fix_ftbfs_patchbomb_test.patch: fix patchbomb test.

Show diffs side-by-side

added added

removed removed

Lines of Context:
.pc/applied-patches
9
9
deb_specific__fix_hg-ssh_interpreter.patch
10
10
for_upstream__dont_rm_usr_bin_python_when_running_testsuite.patch
11
11
for_upstream__lenient_test-shelve.patch
 
12
CVE-2014-9390.pt1
 
13
CVE-2014-9390.pt2
 
14
CVE-2014-9390.pt4
 
15
from_upstream__sshpeer_more_thorough_shell_quoting.patch
 
16
fix_ftbfs_patchbomb_test.patch