[Python-apps-team] Accepted mercurial 2.2.2-4+deb7u7 (source all amd64) into oldoldstable

[Antoine Beaupré]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 26 Mar 2018 13:56:31 -0400
Source: mercurial
Binary: mercurial-common mercurial
Architecture: source all amd64
Version: 2.2.2-4+deb7u7
Distribution: wheezy-security
Urgency: medium
Maintainer: Python Applications Packaging Team <python-apps-team at lists.alioth.debian.org>
Changed-By: Antoine Beaupré <anarcat at debian.org>
Description:
 mercurial  - easy-to-use, scalable distributed version control system
 mercurial-common - easy-to-use, scalable distributed version control system (common
Closes: 892964
Changes:
 mercurial (2.2.2-4+deb7u7) wheezy-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Security Team.
   * Fix non-deterministic build test suite failure introduced in
     CVE-2017-1000116, spotted by Chris Lamb
   * CVE-2018-1000132: Incorrect Access Control vulnerability in Protocol
     server that can result in Unauthorized data access (Closes: #892964)
Checksums-Sha1:
 b0f63f7cbff2822e1ccc2fa4f88454764f9b7340 1833 mercurial_2.2.2-4+deb7u7.dsc
 26d70c61a89f0e68dcab2077ef26d85192d1fe9c 68730 mercurial_2.2.2-4+deb7u7.debian.tar.gz
 c2fe0b31fc0ad6ecdf7c1c4f9227e65ad4388e3c 2325194 mercurial-common_2.2.2-4+deb7u7_all.deb
 a5b8263f7e4de9f81e9835bf177fc8cdb53e0b57 94018 mercurial_2.2.2-4+deb7u7_amd64.deb
Checksums-Sha256:
 f01e53b02fcb10b57cb55e22bfb27eead48c8db3436a38cc1f7d6af5bbf50102 1833 mercurial_2.2.2-4+deb7u7.dsc
 641b838431390d3cdc4e3a1102ecb620534e5dde1e91ea319237765ace7e314b 68730 mercurial_2.2.2-4+deb7u7.debian.tar.gz
 277be344f6fbb3c277bd89b72e2daf2021773960e7c3ebcac15ce965c6da6c01 2325194 mercurial-common_2.2.2-4+deb7u7_all.deb
 a9bc7445b55b76e6e664d98478147da15b13df1fbcf2716c37533fbc2309d957 94018 mercurial_2.2.2-4+deb7u7_amd64.deb
Files:
 1cd3dcd517c36c3bdacd94814c1edb93 1833 vcs optional mercurial_2.2.2-4+deb7u7.dsc
 8aafd7420d4c408479c6a002bf3b2695 68730 vcs optional mercurial_2.2.2-4+deb7u7.debian.tar.gz
 375ab66f95f8626e66e0f3887bc0f48a 2325194 vcs optional mercurial-common_2.2.2-4+deb7u7_all.deb
 d0f331549d5b9f3554e1978beda74899 94018 vcs optional mercurial_2.2.2-4+deb7u7_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEexZCBNCWcjsBljWrPqHd3bJh2XsFAlq+VLEACgkQPqHd3bJh
2XuU2wf9FITM+HE1YXajoLPb0mgGzMGNs84YsPEaP2QyUDXgr28zHbHXIuORSGWD
FLafQ6VmFogHKZLLm++YqwaTIvhjSXt61WrWsOvKGXLxp5Aj+6iQhpaGRgEEJHZn
MpjqwLvjUTBF/RGdTeqSi4Xw1rtLDq0qconRuBalZARmUDRk9ZXaP5MpfcnIj1wJ
jMr7vFucoRjZE6duxMuW9tdbY5Yt4nurzUDoBPcUX7tFDKkJgLR7NAqa1oui5M0w
FghWhlQ2FRXFGAkzqhx6gCtjYUeNLvoQUp4nb0ugnLqxiHFbss//fBHWtaADKRfa
iW6rZ1SFNHm1qwLla+UU7SnT3uXYWA==
=swJ5
-----END PGP SIGNATURE-----