Accepted curl 7.72.0-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 24 Aug 2020 10:26:12 +0200
Source: curl
Architecture: source
Version: 7.72.0-1
Distribution: unstable
Urgency: medium
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Closes: 955785 965280 965281 968831
Changes:
curl (7.72.0-1) unstable; urgency=medium
.
* New upstream release
+ Fix partial password leak over DNS on HTTP redirect as per CVE-2020-8169
(Closes: #965280)
https://curl.haxx.se/docs/CVE-2020-8169.html
+ Fix local file overwrite with -J option as per CVE-2020-8177
(Closes: #965281)
https://curl.haxx.se/docs/CVE-2020-8177.html
+ Fix wrong connect-only connection as per CVE-2020-8231 (Closes: #968831)
https://curl.haxx.se/docs/CVE-2020-8231.html
* Refresh patches
* Do not install *.la files.
Thanks to Pino Toscano for the patch. (Closes: #955785)
* Update list of doc files
* Update copyright for polarssl -> mbedtls rename
* Use python3 executable in tests
Checksums-Sha1:
e8da08d7b2677e10793a8a83eff239656e73d942 2664 curl_7.72.0-1.dsc
735352fc82f7ebeeaaba2b584e564c78642d3dac 4051784 curl_7.72.0.orig.tar.gz
607f5e94a3691839ceed146f484a2d2262263717 29768 curl_7.72.0-1.debian.tar.xz
759fe01738d0e9107f312a8077a76a7728f88271 11889 curl_7.72.0-1_amd64.buildinfo
Checksums-Sha256:
be18fbdc46034126e505dc04f98a8b36fc32a287441c08e2211ed6a1074b606c 2664 curl_7.72.0-1.dsc
d4d5899a3868fbb6ae1856c3e55a32ce35913de3956d1973caccd37bd0174fa2 4051784 curl_7.72.0.orig.tar.gz
158ef5b94633cf4dc3a74ce3c7d807af3f711621cf51638b8a12ca952a988a39 29768 curl_7.72.0-1.debian.tar.xz
11822ae0dc7068a01bd1eabe812d71cbed4bf0891c2b2dc6e5eb3c82fed16f5a 11889 curl_7.72.0-1_amd64.buildinfo
Files:
5ad96faddc13832a0a8ec16a75de6402 2664 web optional curl_7.72.0-1.dsc
7422feb126df677d2d33294a1fd079ea 4051784 web optional curl_7.72.0.orig.tar.gz
89ce257aaa36a12a85bdb210b1fb30fd 29768 web optional curl_7.72.0-1.debian.tar.xz
1df40153605b692e36bafa2f5d4b81f9 11889 web optional curl_7.72.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cP3P
-----END PGP SIGNATURE-----
Reply to: