-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Mar 2025 13:56:44 +0100
Source: mercurial
Binary: mercurial mercurial-dbgsym
Architecture: arm64
Version: 6.3.2-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Description:
 mercurial  - easy-to-use, scalable distributed version control system
Closes: 1100899
Changes:
 mercurial (6.3.2-1+deb12u1) bookworm-security; urgency=high
 .
   * CVE-2025-2361: reflected XSS in hgweb (closes: #1100899)
   * patchbomb: don't test ambiguous address (fixes FTBFS after python's
     fix for CVE-2023-27043).
Checksums-Sha1:
 7a8ab626bc1b0b08b2dba236130e40288fe28d79 1602708 mercurial-dbgsym_6.3.2-1+deb12u1_arm64.deb
 4e85cc5ee7df9d9626a501666a0e5dc9f1321d54 7446 mercurial_6.3.2-1+deb12u1_arm64-buildd.buildinfo
 924a8693f61799397d64edcda1e4b075b5912937 312888 mercurial_6.3.2-1+deb12u1_arm64.deb
Checksums-Sha256:
 cc3d0bcf83099a032df07c671b3316684a9ca5dfd04587953b78091d446eab9d 1602708 mercurial-dbgsym_6.3.2-1+deb12u1_arm64.deb
 c1d77c881825da730b1be1f0bd070fe8bfc127a9a00f5c4df7f682b49adf8603 7446 mercurial_6.3.2-1+deb12u1_arm64-buildd.buildinfo
 9f763eb7cd73150f39021e56536d22e9cf97ddb5d724ef457fa63c20361c2b2d 312888 mercurial_6.3.2-1+deb12u1_arm64.deb
Files:
 1e402d3a70b39fa792c7adc54d01bac1 1602708 debug optional mercurial-dbgsym_6.3.2-1+deb12u1_arm64.deb
 25b4b91262242d3237a7ffc93b3da213 7446 vcs optional mercurial_6.3.2-1+deb12u1_arm64-buildd.buildinfo
 89f20e55a2698c3ae65286085c88f608 312888 vcs optional mercurial_6.3.2-1+deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=wvQU
-----END PGP SIGNATURE-----