[Python-apps-team] Bug#598841: mercurial fails to verify ssl validity in https connections

[Javi Merino]

On 18/10/10 22:32, Moritz Muehlenhoff wrote:
> On Sat, Oct 02, 2010 at 12:26:22PM -0300, Wagner Bruna wrote:
>> Package: mercurial
>> Version: 1.6.2-2
>> Severity: important
>> Tags: security, fixed-upstream, patch
>>
>>
>> Forwarding this upstream security issue:
>>
>> http://mercurial.selenic.com/bts/issue2407
>>
>> A fix is available at:
>>
>> http://selenic.com/repo/hg-stable/rev/f2937d6492c5
>>
>> and included in version 1.6.4.
> 
> Dear Mercurial maintainers,
> this is still unfixed in Squeeze, so this will likely need a
> targeted fix for testing or the 1.6.4 version needs a freeze
> exception. Please get in touch with the release team.

We've contacted the release team and asked them for a freeze exception
on 1.6.4, but haven't got a response yet.

Cheers,
Javi (vicho)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/python-apps-team/attachments/20101018/d5b6ef7e/attachment.pgp>