-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: armel Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: 810150702f977337d58b209727883355a1c5befe 1272312 lynx-dbgsym_2.8.9rel.1-3+deb10u1_armel.deb d3b228f575b30b13aa360b018c05ee43bfb5f068 6861 lynx_2.8.9rel.1-3+deb10u1_armel-buildd.buildinfo 45600fcf5f466e3623fb28d035f3155abfb77016 555116 lynx_2.8.9rel.1-3+deb10u1_armel.deb Checksums-Sha256: bcee80e6c9b7a750297a097966135850726c2172699c2913ea0e0fbd0e498b6e 1272312 lynx-dbgsym_2.8.9rel.1-3+deb10u1_armel.deb 21e3deec10638088397c6065d305a2174c63a1a4bcbf5846aa65084fd3687811 6861 lynx_2.8.9rel.1-3+deb10u1_armel-buildd.buildinfo 47c98cc503339e325191d0e2826baf51b2326444fde960fee426c8ceb75aa6dc 555116 lynx_2.8.9rel.1-3+deb10u1_armel.deb Files: dee3dffa44171a9e1fd7572ee6a91a35 1272312 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_armel.deb d5e81a42abf57a72983bf9840ee3b1ce 6861 web optional lynx_2.8.9rel.1-3+deb10u1_armel-buildd.buildinfo 7092d40cdcd4e89f7a4e2fc4f004cab2 555116 web optional lynx_2.8.9rel.1-3+deb10u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnkOoRyjJ0+t2tN7OjOf+cynECFcFAmER2PIACgkQjOf+cynE CFfFkw//RP1G4a9p1JIJ6vbepjwyuPIsP+gaz0oPw9BW4TOpq/dXtug2LzzR4+jV q0pussK/QVZ77nCO4pwlN+ltSlrC5w+60jZNV0HFd+yF9yPOjyCU2eXxbfszdgdk m6o8tzMUgZLgztspYjibeAFZ+NRYbxovS7hv75P3D7DbC9+sigVYtpJp0+gIyCyz TlR8q+JNPRvjg3OELeETbaZMMsHD3zvaOTXLG/HIw6BnKBsisv9ppyFC/dsXgpVR kwbIG80ZdZqcV45LcFZyTF0iXBJQoA62aRe4e4q725A2yPaNaBSEq51Qm14VZLPv wfhBBBIPuJcekR3DXFh6E9MoiX4Xyo98uxHZbOoxboXg3fbLVMHO0xQtqScjCTuQ f8YXRdB1nU2VhEA6/eDL0rWEzKJSyNuCPe3TKwziapGVNVOBhCS2/Bk1IwyASJhd 6Nn/iqFkBNApC3sPpTXE42GCpbg3fs2JHs8obhVDZzrsKk2qDa4G44ZjM32R8oKe 3F4Ss64sKQ1+L2PBUX6s1jhgQlF/xOFsR8NJKDukKsWV6hfiplYCHD4w5lft7+qd fCRdqVsurloDcKvAfSf2MDE9lVuwFv0B4bICOwP/MAWWTh7bt7qVX5ioLvNdtiFF aaVBI5N37Budk3ZEArFtPwMbnH6hV8X6SVcCiHzlM7V7/ua7Rgg= =/Ro9 -----END PGP SIGNATURE-----