-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: arm64 Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: f5d9787fb90355443bbe13e6d888c49e8c8fa01f 1332060 lynx-dbgsym_2.8.9rel.1-3+deb10u1_arm64.deb 46f5f5b9982ed70502ee7ed75641c14989a412f2 6929 lynx_2.8.9rel.1-3+deb10u1_arm64-buildd.buildinfo a349ec9bccba978b18f93d2434a4c47e696a4777 587968 lynx_2.8.9rel.1-3+deb10u1_arm64.deb Checksums-Sha256: 9c135a1f8524f303caf7bcffd8e519d48abb1de5561417413f98e52407059402 1332060 lynx-dbgsym_2.8.9rel.1-3+deb10u1_arm64.deb c35e2c3f0850ac5ee2716df28ab6e0ae960b501f1939601f735dad209921e6d6 6929 lynx_2.8.9rel.1-3+deb10u1_arm64-buildd.buildinfo dfef7eacd9743db66ac9cf0ff4eb2755ff5c1257c39b846497211c1f7b9ceb1b 587968 lynx_2.8.9rel.1-3+deb10u1_arm64.deb Files: bf56a8cc348d5844d0c797914b740e3e 1332060 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_arm64.deb 744c3a51199ef2f919352881a944c0f8 6929 web optional lynx_2.8.9rel.1-3+deb10u1_arm64-buildd.buildinfo 4c1a9deff20080b73373e3fbffb22b66 587968 web optional lynx_2.8.9rel.1-3+deb10u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEacaZJEoOkCBqMc0ik7/kqR9yTgQFAmER2O4ACgkQk7/kqR9y TgQBDg//dohlZ/BhR0SXHGoyETcKj2xIqm7qKfchUEhxzsucg4Xj47YXlVdHmW32 JpIChaAKQkG1jd3L0v8qT0Y+QLBR6CmPEh1XP2U6vshJz8mhyxqWAWuo/KKJBlrp LQB9mSFqWEvCQR9QbfJMI746XHg3ulXhVVDsCEgaY0t+uEwFajb943NfGhOK54sA EY8B5874QBnl0iALBoBVkehcKvrP1xhpdxcCCV1EbSjVh1u72bQ6NTCk5C9Rk2/4 sJZ801AO6DWOt+Z3I9OWvh/92pvzmGHxzcTXyGWCBwj/rJgUlkWRMg/hi7WTxaq0 FjwGTaB6wSPbr4aZtOZdT5b8E1CsC50M8fYdKefHRchypOGWXoWxXzW3CciwJKiD DT9Zb4mhKj4F5EzJktKfwVPxl4OIkEXKZH7OFUFGXplnz124u9slJVOUe5Kmdmn8 H9q5wD4C+nQecDtK2FwrjxsPx4JeF9LhUXFYNPXJwUNNHCxI3pgE08L91Ii5MA/L ItAPkJx/7ObY22xeVDuhOfY8mNq4/dp88w7rO9aKkggVF80HFmy7jBz4D0qgnadV HHinmgXtInZfKYO2VOzFy0l+jMVnwALdvFpsGk8z9JafBuHCj6+N9GKM5SrtjLzR PzVyiW5iq/IBeDZn412/6Aemu80+44TVJd7u6hNM61OmIzwaCDA= =TgFZ -----END PGP SIGNATURE-----