-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: armhf Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: e72e015f75222288ab6266adcc7cbd1b20665ce2 1299216 lynx-dbgsym_2.8.9rel.1-3+deb10u1_armhf.deb d25d016c3fe30b3175e41541817fd638f9e3a0b0 6863 lynx_2.8.9rel.1-3+deb10u1_armhf-buildd.buildinfo 39aecb139503724f3740bf0b2c3ce4f74d76cd99 571092 lynx_2.8.9rel.1-3+deb10u1_armhf.deb Checksums-Sha256: ae000cbe0985a0120fb705dbcb61fe7a7ace5452b6345f84e5717fe1400c46b0 1299216 lynx-dbgsym_2.8.9rel.1-3+deb10u1_armhf.deb a9ecc866fa36eb546dd19628955a16f878e24c5e6cd6b50863b40b563e95420e 6863 lynx_2.8.9rel.1-3+deb10u1_armhf-buildd.buildinfo 531c979b11211c7dd79f552ed7f3678e5b3067def8231ed77e0803f63b33dac7 571092 lynx_2.8.9rel.1-3+deb10u1_armhf.deb Files: 11e8d8a8f3ccd74fa31951860ba637aa 1299216 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_armhf.deb ddb74a1f001caad29903715af2dea5f8 6863 web optional lynx_2.8.9rel.1-3+deb10u1_armhf-buildd.buildinfo 8d995cd8da2f4b6f4f960cf600fa32cd 571092 web optional lynx_2.8.9rel.1-3+deb10u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEFZimt3pArPw4b+NwUUntMkUVbIkFAmER2MYACgkQUUntMkUV bImomw/+N2Vx+HbfrYP23HV7FdT8vJBXe6s2wvqckmZikvx5+Qoq2K/BIY/zFOI5 sAgmtMJKyYzGVOVWCm8m8OLjRt0Sw53RPH0asht1WipPkI1V8lTYf0jV8qdiZFFV dxjFPuj68RmBnIrkGy5/MtjBWnokvjLT15VhhORiJs4cOQTL5Gz8zY4Nk2Ru+oNU GSqKrjdez3NoCPV/qRvJVT2QtegC8nZZJvhBySOAmrtGgUbYxMome7KSMTgatjpD 9pWAGGqjKa1xSy33o+y2JzusgEtsjuOpH/ucwkrfUF0FYpT0uBqezmoT3UBKacTH A4lnYTsj+epon1/gx8KM+GVgS5YHYSFxoyseNoAMhcpdgMiE4sZ+fhmIYDOzrt3g lY59s3tmdI+mPUZyCbCOBX1sj0+a4VcsnBUFU7KPS78PpE8cbtb+d63bmqcZXPwr OSTpSnicB5iat1u3EtVuw17ozQmUa3DuGY6IAhME6By6AhTXG1gDyYTsS7JRs3fV 3D29gnEEx76Rm98A8n4cploKwZyTXyVx2jTNEeyLr/6LdFXymAKk4JetCDbkzcEk 3zhNhrIFj9PXEDk/LSlRH911134EqUYeRM0J6VS0Pfzwt8CDoO6/hZ+HwR+zz2pV zUGIye+VFOout+D0yW6DIjKogj96qX2B3mJJLxyp78asPvX3LWM= =w2ke -----END PGP SIGNATURE-----