← Back to branch summary

~ubuntu-branches/ubuntu/utopic/mercurial/utopic-updates

« back to all changes in this revision

Viewing changes to debian/changelog

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers, Jamie Strandboge, Marc Deslauriers
  • Date: 2015-06-17 13:09:05 UTC
  • Revision ID: package-import@ubuntu.com-20150617130905-oz83huwlvaox2ug8
Tags: 3.1.1-1ubuntu0.2
https://launchpad.net/bugs/1404035
[ Jamie Strandboge ]
* SECURITY UPDATE: fix for improperly handling case-insensitive paths on
  Windows and OS X clients
  - http://selenic.com/repo/hg-stable/rev/885bd7c5c7e3
  - http://selenic.com/repo/hg-stable/rev/c02a05cc6f5e
  - http://selenic.com/repo/hg-stable/rev/6dad422ecc5a
  - CVE-2014-9390
  - LP: #1404035

[ Marc Deslauriers ]
* SECURITY UPDATE: arbitrary command exection via crafted repository
  name in a clone command
  - d/p/from_upstream__sshpeer_more_thorough_shell_quoting.patch: add
    more thorough shell quoting to mercurial/sshpeer.py.
  - CVE-2014-9462

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/changelog
 
1
mercurial (3.1.1-1ubuntu0.2) utopic-security; urgency=medium
 
2
 
 
3
  [ Jamie Strandboge ]
 
4
  * SECURITY UPDATE: fix for improperly handling case-insensitive paths on
 
5
    Windows and OS X clients
 
6
    - http://selenic.com/repo/hg-stable/rev/885bd7c5c7e3
 
7
    - http://selenic.com/repo/hg-stable/rev/c02a05cc6f5e
 
8
    - http://selenic.com/repo/hg-stable/rev/6dad422ecc5a
 
9
    - CVE-2014-9390
 
10
    - LP: #1404035
 
11
 
 
12
  [ Marc Deslauriers ]
 
13
  * SECURITY UPDATE: arbitrary command exection via crafted repository
 
14
    name in a clone command
 
15
    - d/p/from_upstream__sshpeer_more_thorough_shell_quoting.patch: add
 
16
      more thorough shell quoting to mercurial/sshpeer.py.
 
17
    - CVE-2014-9462
 
18
 
 
19
 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 17 Jun 2015 13:09:05 -0400
 
20
 
1
21
mercurial (3.1.1-1) unstable; urgency=medium
2
22
 
3
23
  * New upstream release