-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 Jan 2020 00:05:50 +0100 Source: openconnect Architecture: source Version: 8.02-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: Mike Miller <mtmiller@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 940871 Changes: openconnect (8.02-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Close HTTPS connection on failure returns from process_http_response() * Fix buffer overflow with chunked HTTP handling (CVE-2019-16239) (Closes: #940871) Checksums-Sha1: ce0d60f9cd2788558023bee5b8378a513af73475 2783 openconnect_8.02-1+deb10u1.dsc e36c8551a75cfef2721a2f432d1b69f1a83722bc 1876135 openconnect_8.02.orig.tar.gz 1ca8f3e7b18b996b7818912fa2c13efee4267cdf 15908 openconnect_8.02-1+deb10u1.debian.tar.xz Checksums-Sha256: d634b15712a9eae643c2d064626b37cd21363cd2146f58cdb5f8b4a4d385670c 2783 openconnect_8.02-1+deb10u1.dsc 1ca8f2c279f12609bf061db78b51e5f913b3bce603a0d4203230a413d8dfe012 1876135 openconnect_8.02.orig.tar.gz 2bbecf72fb8f6ca403dacc168461d5d46415da053b66618f80a1b828d12163ef 15908 openconnect_8.02-1+deb10u1.debian.tar.xz Files: 4803c9a22398ec9d0ebc4ff484a02bdf 2783 net optional openconnect_8.02-1+deb10u1.dsc e723c92b0d435df2a521549edbe1fe3e 1876135 net optional openconnect_8.02.orig.tar.gz fc2ceb3bd03d92cd9d032bf43c2ed23e 15908 net optional openconnect_8.02-1+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl4jkHxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EE2kP/1EJ4RKw+Kyz4F4Uv9IEOcSxvmJ4NIcD wGYOL3FMIkhVo/8sxWruGPN+wmM0j/hFXNZdN6PfkRsnVSF18Lj5INzYVCF58t1h R7NI2rO8w6KxzWj5hCieoYfZew2+31OhR0yDbQ7WD5DSZI830Y1ZdtO8p7h9sosd mHlVRaMsBypymjltQel0a26OmLVMajpk2RLVKQZ0CAUB9ORzvM2sbkg07hQWZbDq U3ZgQYhJNU3aEyx/3Ikymthb5qTtJ+xBTTfajww/fZluymF136c2dKB/E28xBzTs UzYlfEIQx1wi2h1qoNdeifDadz+dFLWMHEPV8ilAma9GYYT9pX/h8kbHTQS/ffln 9c+hg4+PHoYGjCLWKzuSUAFzAnrIfloEbPQiiQdE9PCfQ+aRdsSR9l4DF1rlQrrd WEaeXSQr3Hmro5QX9SLUFtpfRUTGcf9twrHBoVAPEnSeJWF/cSLIq++lKJsc2q29 LxIQ6vt6h6Ws1qaxbygL/Aa6lRBA0H/Y/fQ9UV+7QiVBN7apzhzY1JgioGP+FJm1 7ZuLQHTThSDZoeYc8jxN7XDIsLwxUetkK2FSaWIGbIDq8n2w8qmxOk66u0eQV0P4 gfNmKdthPEqlK14q5IE4FoAZdolKi5Srp+e7cM0jqbuiqlSvHnOE/2pVru7S6OiX D7XVwoqvUb9U =p3Kg -----END PGP SIGNATURE-----