-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 03 Jul 2020 15:25:22 +0100 Source: glib-networking Architecture: source Version: 2.64.3-1 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 961756 Changes: glib-networking (2.64.3-1) experimental; urgency=medium . * Team upload * New upstream release - Don't behave as though server TLS certificate had been verified successfully if the application didn't specify the expected identity. (CVE-2020-13645, Closes: #961756; the only application known to be affected is balsa). * Upload to experimental to facilitate testing new balsa versions. This version should gain Breaks: balsa (<< fixed version) before being released to unstable. Checksums-Sha1: 2cf087ad7697c4ceb45dbcba50dbbf45ba94c27b 2611 glib-networking_2.64.3-1.dsc 0fb4ecad270a1f2a500cc03f32f94d89db1426ab 189760 glib-networking_2.64.3.orig.tar.xz 22d2cd024fbf4b83e75ef69a206898d5e5c9d0df 11288 glib-networking_2.64.3-1.debian.tar.xz f7e1f7b7e380a2b6af144fa9c34cd407aca59bbe 7757 glib-networking_2.64.3-1_source.buildinfo Checksums-Sha256: f60c55964219b0cd2720f539eda76d15c207e9a6793928485407fc5559d1c015 2611 glib-networking_2.64.3-1.dsc 937a06b124052813bfc0b0b86bff42016ff01067582e1aca65bb6dbe0845a168 189760 glib-networking_2.64.3.orig.tar.xz 1704bb7e7bd1dbc58c5d18d925af97b31d2b99f37759b30b3c3573b0f236392b 11288 glib-networking_2.64.3-1.debian.tar.xz 39ee84f5697362042d68e6ee55b2cd2389868e9e26b25b6513b5efe961b45f28 7757 glib-networking_2.64.3-1_source.buildinfo Files: ee507f207b1ef765ff032193ea6d1148 2611 libs optional glib-networking_2.64.3-1.dsc eb382907ec941fe2fb1a9676b75acf7a 189760 libs optional glib-networking_2.64.3.orig.tar.xz 70257f5b57a0b1780d64c226eb8ce8d9 11288 libs optional glib-networking_2.64.3-1.debian.tar.xz 646223570d4378a4bfc0a498809cff64 7757 libs optional glib-networking_2.64.3-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl7/XJAQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMT28MD/9jQOiMGxUU5CQ79ZKqOOf1CYITN1My7KdH sKKOqd2bhHo4JJhUG3ew1kbXzUx/wvcdFCMT1+nS7/11rIlkX/1RT+/2+PkEEbR2 RqfRb1GjPKv8gFdr2zBF7FZAMR+eIyC4o16nKpdnNaMQz5OfIxKrEuT6A8Kl2zJz /pBfCc8yLYqJ98yVmj45vWV2CKoLmmzhkrNyJyM2LTYPgUwpZTk/cuuRV5Ty1Qbj cuDCOTWbDxgO+Q+iSzxB+i5HTzdRNNkjBCAIiu8bbgszvzWrycSkBY5zogIy9T6t I6GBZu/JYmTPTv24T4moF8i3obNx0y7tW8jNGB0xFDdzhJZ5yMdieeH3uGSxQYG4 TA3UnfiqMSOXQ/OwnoheRMp7/FvKnUG/CDrW+GVoHMmvFhn6KQiQOsJFFYCzfhZw wtBvZWObNG4YTgKjtS3mIkPVWwnpRZyG3c0pHZrEheIdadnHAq/UkvJwBcv+nCUe 2+yG3TTd3IBU2hKrW/1+u/bZAeL7ugENcJSt3esjTtZXJN8OWbWDud3NRdiouMyV sLIJEHbSTLh3wvOulc6CbnskxoIZVTAN76grONnGOg8cBj4UD8YQrziu/z6D7JOp SpcEGI30gvvmB84lZhzGkWdwcmrXeGLrpuv+ZXDZoyl2CboVA7gUdsZ4gNJy2glw rvrVdibuzw== =nddS -----END PGP SIGNATURE-----