-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 11 Jan 2023 18:55:09 +0100 Source: cargo Architecture: source Version: 0.66.0+ds1-1 Distribution: unstable Urgency: medium Maintainer: Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net> Changed-By: Fabian Gruenbichler <debian@fabian.gruenbichler.email> Changes: cargo (0.66.0+ds1-1) unstable; urgency=medium . [ Fabian Grünbichler ] * fix CVE-2022-46176 (Thanks Peter Green!) * repack vendored sources with required libgit2-sys/git2/git2-curl versions * update unsuspicious files Checksums-Sha1: 45c1e8a4df5490c04ea1197ce7b4d79140fa7687 2762 cargo_0.66.0+ds1-1.dsc b1b613958bd6ed7e68b6d78507ad5769031121b7 8437884 cargo_0.66.0+ds1.orig-vendor.tar.gz edba3b0a4ffe2a31785316c0d7f86bce4c60ec11 2203875 cargo_0.66.0+ds1.orig.tar.gz e467790158ad7211c85490584f9f3c1e7806daf7 53396 cargo_0.66.0+ds1-1.debian.tar.xz a1979c888dcd7ec2adb738729ebb9f21d66167c2 7383 cargo_0.66.0+ds1-1_source.buildinfo Checksums-Sha256: 3e31b3062ec98463ff639cfad54028b9a16f11ecf7d9169589080fc301fba280 2762 cargo_0.66.0+ds1-1.dsc 2ecaea3a8f0c8406a6bb07a596c6834f895d7f7964d806f88e20559ebc23040a 8437884 cargo_0.66.0+ds1.orig-vendor.tar.gz a34dfd2d662a00e426351cde058d3bec039a6b751f7e9a31805e9fe000a98014 2203875 cargo_0.66.0+ds1.orig.tar.gz 7fa0aa618c2b2aa557d83d9cd12f59ecddc5e72b0623c39d35136808ba07098b 53396 cargo_0.66.0+ds1-1.debian.tar.xz 6e53ee641102fe03647fb059ce78591c1134996ae3e5ccb73081d1fe6e5e37fa 7383 cargo_0.66.0+ds1-1_source.buildinfo Files: 3c2e1a1c77c1c16ce2c85f2e77d29db6 2762 devel optional cargo_0.66.0+ds1-1.dsc ddd4c6c5efce2b56765d2280accc8bdf 8437884 devel optional cargo_0.66.0+ds1.orig-vendor.tar.gz e1c27af54cbba3d7d5020013e0336f87 2203875 devel optional cargo_0.66.0+ds1.orig.tar.gz c930d471dee0e520abd3ec630daf8000 53396 devel optional cargo_0.66.0+ds1-1.debian.tar.xz 643cbcd14a0c78b23149756ef11b5cc2 7383 devel optional cargo_0.66.0+ds1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJVBAEBCAA/FiEEbdkGe7ToK0Amc9ppdh5TKjcTRTAFAmPAHnEhHGRlYmlhbkBm YWJpYW4uZ3J1ZW5iaWNobGVyLmVtYWlsAAoJEHYeUyo3E0UwOpAP/iXCE1IhFMMw Eha9pDqOagotYYm8FhHSBK3qQj3v76jFx3eHtFDMi8BTH4HL/WuS8KNpSkGIWfcB L+R9e/ZUnxZHXlyUOSs6FAXJ5/v4a2oHoYckj+Wo8OgFyHSqsCUO/DmT951l+fiw V/Xu3pLNKHxfDBAGrhRhKLZi7tgObjtsei2xykcB4QHg8mKDrI85rwtbwRsWw4jp p5nG/HjFCbTHKcPuAzAMc0LnONeIYYVuxvEI8r8vSmON9gCbRneRpL73RitUfSaz YIaMZDPK9gxwcv5eQvOk4F+VrIBqKcQJXfOEJt1P/jSNWXZIKNbaIPyEeizdqU1Z KWfl5AC4BAwmh9gyuuz0csIo04Z2XHYGTAcixNyPNzqDPGOG2cSMVZZ6bKSKcrRK vXTjf+gLWm/pVDKfFFBFp5HkqnLYcPunAOh4ihzGopgfhjlcIhW2ueJ9YwWgNDqb rLXvjuufFuAuBbjBUacl0j8ddoviNZKdLrsQX3Cjy6WhXUkVBQsonUgd+IGu8Bo9 bw1tmdldf0NaoVPeek31mbZupLBpPStE0N8kJVO7BmUomlh7PLzoAmfbTlqxgcQ2 PRl8xZVC5vGyy+NM1oZK+soVbrp+RuUN732tg/rJloj38gJ9ViKCzss08GXjTJ0m e9ziHwsvIHgdWfByNsSlFKJ3bh3U6eTl =14df -----END PGP SIGNATURE-----