Accepted openconnect 8.02-1+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 Jan 2020 00:05:50 +0100
Source: openconnect
Architecture: source
Version: 8.02-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Mike Miller <mtmiller@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 940871
Changes:
openconnect (8.02-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Close HTTPS connection on failure returns from process_http_response()
* Fix buffer overflow with chunked HTTP handling (CVE-2019-16239)
(Closes: #940871)
Checksums-Sha1:
ce0d60f9cd2788558023bee5b8378a513af73475 2783 openconnect_8.02-1+deb10u1.dsc
e36c8551a75cfef2721a2f432d1b69f1a83722bc 1876135 openconnect_8.02.orig.tar.gz
1ca8f3e7b18b996b7818912fa2c13efee4267cdf 15908 openconnect_8.02-1+deb10u1.debian.tar.xz
Checksums-Sha256:
d634b15712a9eae643c2d064626b37cd21363cd2146f58cdb5f8b4a4d385670c 2783 openconnect_8.02-1+deb10u1.dsc
1ca8f2c279f12609bf061db78b51e5f913b3bce603a0d4203230a413d8dfe012 1876135 openconnect_8.02.orig.tar.gz
2bbecf72fb8f6ca403dacc168461d5d46415da053b66618f80a1b828d12163ef 15908 openconnect_8.02-1+deb10u1.debian.tar.xz
Files:
4803c9a22398ec9d0ebc4ff484a02bdf 2783 net optional openconnect_8.02-1+deb10u1.dsc
e723c92b0d435df2a521549edbe1fe3e 1876135 net optional openconnect_8.02.orig.tar.gz
fc2ceb3bd03d92cd9d032bf43c2ed23e 15908 net optional openconnect_8.02-1+deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=p3Kg
-----END PGP SIGNATURE-----