Cherrypick upstream commit to fix CVE-2020-7692

debian/changelog

-google-oauth-client-java (1.28.0-2) UNRELEASED; urgency=medium
+google-oauth-client-java (1.28.0-2) unstable; urgency=high
 
+  [ tony mancill ]
   * Correct typo in changelog for 1.28.0-1.
     The previous upload closed bug 975846, not 975842.
   * Add B-D on libgrpc-java.  (See: #977038)
+  [ Olek Wojnar ]
+  * Cherrypick upstream commit to fix CVE-2020-7692 (Closes: #988944)
 
- -- tony mancill <tmancill@debian.org>  Sat, 12 Dec 2020 20:21:16 -0800
+ -- Olek Wojnar <olek@debian.org>  Sun, 30 May 2021 14:13:21 -0400
 
 google-oauth-client-java (1.28.0-1) unstable; urgency=medium
 

debian/patches/series

 verbose-build.patch
 only-build-required-modules.patch
+CVE-2020-7692.patch