-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: mips Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: mips Build Daemon (mips-manda-01) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: 9d9d98ba1d8f9989ecf9a665b67f4654149a340a 1354972 lynx-dbgsym_2.8.9rel.1-3+deb10u1_mips.deb 904e0715baabc64fe3c2f11f160b02a4fc127448 6803 lynx_2.8.9rel.1-3+deb10u1_mips-buildd.buildinfo 0aa574dc5599d6429b86eba21f465b289684e0d7 558884 lynx_2.8.9rel.1-3+deb10u1_mips.deb Checksums-Sha256: 615d1c3da025f7795daac3c30949be84a830fb472c0658a2aa8211ec6323fc42 1354972 lynx-dbgsym_2.8.9rel.1-3+deb10u1_mips.deb 46ad52c1a4c52b76fa69fdc1137e07323e1894c536c9711cb6e8605f52236bf7 6803 lynx_2.8.9rel.1-3+deb10u1_mips-buildd.buildinfo f86b253e57abcef7513e0b1da42542ddf197d20b7892bba186e1a982112a5535 558884 lynx_2.8.9rel.1-3+deb10u1_mips.deb Files: 2a1fb5e04b44f0f51822cf2fc8880ca4 1354972 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_mips.deb 31ba8da34113676b2e18877dde3c0cd7 6803 web optional lynx_2.8.9rel.1-3+deb10u1_mips-buildd.buildinfo 76146f54f90ae0603405d9141ea3b330 558884 web optional lynx_2.8.9rel.1-3+deb10u1_mips.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEhnMg2w1ioN6Y4CfNHxQ53MmvhPIFAmER2TsACgkQHxQ53Mmv hPIOwxAAydiqEwM0+ECNgI6YFs7DmAFK0adKTMI3pAj0dCaxdURpj7jZrt4Z+OK8 Rpqr0zW9YQY8hRdehX5hPuV/X1vD/FhhdECTcAyO7U1+ROpiEYFSIQNUbuFX8zL9 ebSgaqn5aC1U7kcVV6W+ya7LjpK9F1hMTNrvOTs1AO9TQiRpRTHoOSs7PDl9b9Ad 8jxaYrqIs7HvoGbZQwh+TOczOeNbw7RfsKGoQMvV7GgFcKKUVZqYcB4Gcwlusxyh dMywvqXxRzR9fbrL/CLyc5DpF17IPtn3uIKOtownIWHT8yaVDvkTzYN1JSQPrIjP CbJ0pnNjL1+icuYVNxikStltRPHlkZOpzF974zIuoyNxvOwop9Gan+2H/aiOUGtT BdoP56YTy1SsyEK+EfrSdTSGNsJCA792d5a3avXGicQXFykphMNzj1iBXd7kL6yE n1L9ohCT/z+SA5xQwi9+7BSx9PjmSVPi70EtPOgc/YdCCKodgjd9wFfMdWq8XWND A6Ks5uCSeNmifYUU1ty4rtwOPonkmSfN8OKDDUC7db2YNPkM+Rga+sipIrHtejuX oJjSjMXUK/yM4zQdqLIBSq7kXGg+YRk0IQcOGaE8mEmMZ8ZHwoOuntQd8sNG6pg0 NqmMczkJ+ImtbsTwkSl4TOUlsR+EdA8UUTqoeTIJb97ohmXvJp4= =uJSs -----END PGP SIGNATURE-----