-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Mar 2025 13:56:44 +0100
Source: mercurial
Binary: mercurial mercurial-dbgsym
Architecture: armhf
Version: 6.3.2-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Description:
 mercurial  - easy-to-use, scalable distributed version control system
Closes: 1100899
Changes:
 mercurial (6.3.2-1+deb12u1) bookworm-security; urgency=high
 .
   * CVE-2025-2361: reflected XSS in hgweb (closes: #1100899)
   * patchbomb: don't test ambiguous address (fixes FTBFS after python's
     fix for CVE-2023-27043).
Checksums-Sha1:
 f6522bcab6cb3609b89f074c4eabd7588d4fddf2 1528400 mercurial-dbgsym_6.3.2-1+deb12u1_armhf.deb
 a174815aaaea64a4d543c7e5e70b4fae8f033a22 7322 mercurial_6.3.2-1+deb12u1_armhf-buildd.buildinfo
 0795295b23480ef72486a593ea158a3105c8d453 286796 mercurial_6.3.2-1+deb12u1_armhf.deb
Checksums-Sha256:
 ade0071c87fc30bceee4b9899ce4db433da9541f2acc687480f04fb5175943f7 1528400 mercurial-dbgsym_6.3.2-1+deb12u1_armhf.deb
 70135953fb8dcbdf8f8d93a8a198a2ab2deaea6b803b30ee348c2c082379e6dc 7322 mercurial_6.3.2-1+deb12u1_armhf-buildd.buildinfo
 ba76538498525d5a69dd98cab01a2fbaa19fdba5df548cce628bc6a22d90c301 286796 mercurial_6.3.2-1+deb12u1_armhf.deb
Files:
 f24d8b4aaf68be4de4127da0fe24bafe 1528400 debug optional mercurial-dbgsym_6.3.2-1+deb12u1_armhf.deb
 e5877371a808113fb7bb61cdeceaa359 7322 vcs optional mercurial_6.3.2-1+deb12u1_armhf-buildd.buildinfo
 f26901d365396feb3f482b3d0063a7b8 286796 vcs optional mercurial_6.3.2-1+deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=wjkD
-----END PGP SIGNATURE-----