[Python-apps-team] Bug#598841: mercurial fails to verify ssl validity in https connections

[Moritz Muehlenhoff]

On Sat, Oct 02, 2010 at 12:26:22PM -0300, Wagner Bruna wrote:
> Package: mercurial
> Version: 1.6.2-2
> Severity: important
> Tags: security, fixed-upstream, patch
> 
> 
> Forwarding this upstream security issue:
> 
> http://mercurial.selenic.com/bts/issue2407
> 
> A fix is available at:
> 
> http://selenic.com/repo/hg-stable/rev/f2937d6492c5
> 
> and included in version 1.6.4.

Dear Mercurial maintainers,
this is still unfixed in Squeeze, so this will likely need a
targeted fix for testing or the 1.6.4 version needs a freeze
exception. Please get in touch with the release team.

Cheers,
        Moritz