1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • Re: bitches kann kiss my ass (1/2)

    From Elmar Stellnberger@1:229/2 to All on Tue May 12 10:10:03 2015
    XPost: linux.debian.security
    From: [email protected]

    This is a multi-part message in MIME format.
    Re: bitches kann kiss my ass

    Am 11.05.15 um 22:33 schrieb Johannes Wolpers:
    I will dominate this world one day

    what a kind of perverse longing?
    *Gesendet:* Montag, 11. Mai 2015 um 22:05 Uhr
    *Von:* "Salvatore Bonaccorso" <[email protected]>
    *An:* [email protected]
    *Betreff:* [SECURITY] [DSA 3257-1] mercurial security update
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    -
    ------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso
    May 11, 2015 http://www.debian.org/security/faq
    -
    -------------------------------------------------------------------------

    Package : mercurial
    CVE ID : CVE-2014-9462
    Debian Bug : 783237

    Jesse Hertz of Matasano Security discovered that Mercurial, a
    distributed version control system, is prone to a command injection vulnerability via a crafted repository name in a clone command.

    For the oldstable distribution (wheezy), this problem has been fixed in version 2.2.2-4+deb7u1. This update also includes a fix for
    CVE-2014-9390 previously scheduled for the next wheezy point release.

    For the stable distribution (jessie), this problem has been fixed in
    version 3.1.2-2+deb8u1.

    For the unstable distribution (sid), this problem has been fixed in
    version 3.4-1.

    We recommend that you upgrade your mercurial packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBCgAGBQJVUQtdAAoJEAVMuPMTQ89EQDcP/2qNgRl1fhhTTuzQUpTSutuF 8tauTnYT3xuu3PB6aXDWEqFTmmKxUQQiOyVxTWeqeF7jWs7Wu0naTBrs+tKvC4b2 lxy8AC5asTNmPdxUeJMqsUonHvkFEBqGQnomhOwb/qB2oEMgO3vGCrrEs7IFGZ9r Z+yi91ZbnzMXrH1t2cAGYRmilhquhLg0OEp4hjFhiEZor9GS+Ejdb+g2r/Ug5YFx bQUsMwJ8ww5r8WjFkTybwAT9iORR2uD6QyyzT11w/F9nXmCZEcurCN+xJKtkyTLW 7ImSrFuhcUbCYSSf9JYiY69SeojBXFkGD8maxjZG8avqzEiKqmxIODUVEn4qO5HD bSBS/aG6oHD9Sw4pGAtrR2WlOucPf4UOnBxB2ztYrLgMrSE9uMBdceMK8ts2hIrP e8AojdicvaJZ2q0BBWCo8BSsWpwwN4bgDnWj3d6r63cWWQM/6b6ZSA2NlQsAs0V1 oIVCpiUWZImc8I6GKpp3cQM69ECIIgH2+tr7gimsUlTzObP3heGqEqjrA60KAAdl pe6vZClklSyhF1lOqW/p2SSLDcNWZ/ht/0bP223an1yXzwbVi8t/qRXGfggHi+cr QXEhw2LSRBhQ+894iznWPXHmBdYqKu+hC/yMD+D0B5W64PSRtDxjfMoJi562pNWZ zifFdMx9P3uOVEHG+d+V
    =jXXY
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact
    [email protected]
    Archive: https://lists.debian.org/[email protected]
    -- To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact
    [email protected] Archive: https://lists.debian.org/trinity-e0570acb-0124-40c7-8393-ac79e4b864d3-1431376383081@3capp-gmx-bs16


    <html>
    <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
    </head>
    <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">&gt; Re: bitches kann kiss my ass<br>
    <br>
    Am 11.05.15 um 22:33 schrieb Johannes Wolpers:<br>
    </div>
    <blockquote cite="mid:trinity-e0570acb-0124-40c7-8393-ac79e4b864d3-1431376383081@3capp-gmx-bs16"
    type="cite">
    <div style="font-family: Verdana;font-size: 12.0px;">
    <div>I will dominate this world one day
    </div>
    </div>
    </blockquote>
    <br>
    what a kind of perverse longing?<br>
    <blockquote cite="mid:trinity-e0570acb-0124-40c7-8393-ac79e4b864d3-1431376383081@3capp-gmx-bs16"
    type="cite">
    <div style="font-family: Verdana;font-size: 12.0px;">
    <div>
    <div> 
    <div name="quote" style="margin:10px 5px 5px 10px; padding:
    10px 0 10px 10px; border-left:2px solid #C3D9E5;
    word-wrap: break-word; -webkit-nbsp-mode: space;
    -webkit-line-break: after-white-space;">
    <div style="margin:0 0 10px 0;"><b>Gesendet:</b> Montag,
    11. Mai 2015 um 22:05 Uhr<br>
    <b>Von:</b> "Salvatore Bonaccorso"
    <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]">&lt;[email protected]&gt;</a><br>
    <b>An:</b> <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a><br>
    <b>Betreff:</b> [SECURITY] [DSA 3257-1] mercurial
    security update</div>
    <div name="quoted-content">-----BEGIN PGP SIGNED
    MESSAGE-----<br>
    Hash: SHA512<br>
    <br>
    -

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)