-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: amd64 Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: 3dbe16be0dc990fad2cb38fb269cc8a1687bf117 1325388 lynx-dbgsym_2.8.9rel.1-3+deb10u1_amd64.deb 515610f30c4b96821dc69eee4712512a78283af7 6977 lynx_2.8.9rel.1-3+deb10u1_amd64-buildd.buildinfo 1b0283b3c07d4beda4b0984b2a948851e9397a71 642000 lynx_2.8.9rel.1-3+deb10u1_amd64.deb Checksums-Sha256: b9bc5064ece430a1235ff3fe6cdbab51328f5ece82e1eea1021412605cbf919a 1325388 lynx-dbgsym_2.8.9rel.1-3+deb10u1_amd64.deb 6ac9e4cf32431c44adfc91f5ecebe936d0315885b76eac037d3b5bb14f40930f 6977 lynx_2.8.9rel.1-3+deb10u1_amd64-buildd.buildinfo 34fbf20a588386ddf3c510382086f1cab73d9cf3d1d88685ff3199089c24e71a 642000 lynx_2.8.9rel.1-3+deb10u1_amd64.deb Files: 62807943547806ca130c213eaf177e60 1325388 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_amd64.deb 0d7678a2a5a191884ba11dcaa0b49a06 6977 web optional lynx_2.8.9rel.1-3+deb10u1_amd64-buildd.buildinfo 915e1222d95069d065d7e5071ac04a75 642000 web optional lynx_2.8.9rel.1-3+deb10u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN7duNU9NP062TWmbN0rYXSImzT0FAmER2CoACgkQN0rYXSIm zT1YjA//TPrGBdmk7QkOXcXl03l5ssDV8eyHLWPVLbmsmudPweh2p+n19m9Si741 k4h/UOFuL1V7GxHizILlzxGNVRNcB5HVm6YKIruHqZO8ktHgshA/OJ62th7Neu+g JKcqExN0v5pp9fBf8LtHcgteoGnLy+ZZBZSk5Yvmdue2XZv5sWRfxhH3r/sSU30Y ux4ZMdRSWkZclw3e2HkpfcnFseOu5AYiNvKY/NecVinrRj198z2Hi9SNmsAtUaMa eYmF36RtrOv3vhBB5Ssck8WZvI5tBHpZs+RgJf/n241XXh6adDfXPQferhUN4pNt cShFXNqshuOmDG0JrBd2vanOy2B3ez3qvYHpvcVaF+jwU6n99MhzEnB0rNFALXeQ /tdiZYbYD2vuEEJ6PRn3D4OwmqpcGfhNK6Io7ZT+xVfCWAB79aUn02yGUHSmTUfu ZnqFDoldG0ZV5vmArOptj1lRX+kmqXhCHzYGI7w5BO7UzIyGLLDBp+pMKfdXbTsS wrcPKG7lRWxY2guEmVqIya7POvPBUHVnrl5FnQ3odjnhxZkWK/9lVZ18otz8wPdG Muo0TcV2uHfzJrUty0AGnTXf1hwIPP7gk+0Ty0+oZQ7feKfFfSyooiX7X5R5druN BiCSp47eIFCloMeDrYlmtM3f6OR8BEjsepYmkkKvuqlMYBESdKk= =yGx9 -----END PGP SIGNATURE-----