Accepted alpine 2.23+dfsg1-1~bpo10+1 (source) into buster-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384
Format: 1.8
Date: Wed, 24 Jun 2020 23:25:05 -0400
Source: alpine
Architecture: source
Version: 2.23+dfsg1-1~bpo10+1
Distribution: buster-backports
Urgency: medium
Maintainer: Asheesh Laroia <asheesh@asheesh.org>
Changed-By: Unit 193 <unit193@debian.org>
Closes: 956361 963179
Changes:
alpine (2.23+dfsg1-1~bpo10+1) buster-backports; urgency=medium
.
* Rebuild for buster-backports.
.
alpine (2.23+dfsg1-1) unstable; urgency=medium
.
* New upstream version 2.23+dfsg1.
- Security Bug: Alpine can be configured to start a secure connection using
/tls on an insecure connection. However, if the connection is PREAUTH,
Alpine will not upgrade the connection to a secure connection, because
a client must not issue a STARTTLS to a server that supports it in
authenticated state. This makes Alpine continue to use an insecure
connection with the server, exposing user data. Reported by Damian
Poddebniak and Fabian Ising from Münster University of Applied Sciences.
Closes: #963179, CVE-2020-14929
- Attempt to fix a bug that breaks scrolling of a message in
Alpine when the screen is resized. (Closes: #956361)
* d/control, d/copyright: Update my email address.
* d/control:
- Bump DH compat to 13.
- Drop versioned B-D on dpkg-dev, no longer needed.
Checksums-Sha1:
d4d2e16825127b4a30bc431cc19746149e834fdf 2216 alpine_2.23+dfsg1-1~bpo10+1.dsc
1259c74c2cd38da5d4c31697552581690ac26fb0 15540 alpine_2.23+dfsg1-1~bpo10+1.debian.tar.xz
e551c615df99258251ea3b505beda8fc6199f8be 8425 alpine_2.23+dfsg1-1~bpo10+1_amd64.buildinfo
Checksums-Sha256:
c3563c4fb694186901b4165be9cc2af00ec43e9a8d50d68556e623030ae7da3d 2216 alpine_2.23+dfsg1-1~bpo10+1.dsc
00672e1e002681cb2d22333fed00023b5e00d5a74ba71a14798abc8806bee380 15540 alpine_2.23+dfsg1-1~bpo10+1.debian.tar.xz
cf2c4dea08323cea143672b2f1455c825a031d0ef418b62013b44a84e75be636 8425 alpine_2.23+dfsg1-1~bpo10+1_amd64.buildinfo
Files:
d4a9ad1510339faaf48960407f84ef51 2216 mail optional alpine_2.23+dfsg1-1~bpo10+1.dsc
5566cec5c8a93cda6f1fdc2574f03099 15540 mail optional alpine_2.23+dfsg1-1~bpo10+1.debian.tar.xz
1a1914918e940c223d0bed3d6d528555 8425 mail optional alpine_2.23+dfsg1-1~bpo10+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=wMbP
-----END PGP SIGNATURE-----
Reply to: