-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: mips64el Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-aql-03) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: 2af887bdf49a3ce241868c6e082f962953bc0b93 1413400 lynx-dbgsym_2.8.9rel.1-3+deb10u1_mips64el.deb 6bca1530fa37d51e073b3a4bcf8f5ecf27711e4a 6844 lynx_2.8.9rel.1-3+deb10u1_mips64el-buildd.buildinfo 17fc4aca8b6c076f0d535d9fe9c15cc7855d6e02 560728 lynx_2.8.9rel.1-3+deb10u1_mips64el.deb Checksums-Sha256: c872f027696155a802cbf4ea95efce4192a2ed8c801b1f3e29c9e8cc4d7f4045 1413400 lynx-dbgsym_2.8.9rel.1-3+deb10u1_mips64el.deb db93fe44d812bb3d6927ac66e02da5815fcac5f7860125aa2e9f1193f131e669 6844 lynx_2.8.9rel.1-3+deb10u1_mips64el-buildd.buildinfo 48714c1d5edd7bb4355cac5d910e1b8163a2e7eadcc8d824295b8d0a99da9e17 560728 lynx_2.8.9rel.1-3+deb10u1_mips64el.deb Files: 69bad8fb2e109827c923679745c9f431 1413400 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_mips64el.deb 5db395d37dc7762de6d2545a98e4686d 6844 web optional lynx_2.8.9rel.1-3+deb10u1_mips64el-buildd.buildinfo 1b59ad82c4936b4ef56807da40a3ecd5 560728 web optional lynx_2.8.9rel.1-3+deb10u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6YhmUaQdOAULQQfkuEloAOY175IFAmER2aYACgkQuEloAOY1 75LiexAAtXfpIjj8CYqxkstWMWhxMF9CN/YmiKvOpiYDnItFkqWk7Y7UoRDwCs/J RzjssH2jxzMjA313SWqa9fQWBM4vUaf4vGJHPGQVoilPYsfUam4iLhD5s8xvEDSz v3p5kWtDg06ZEesL3maB1wHsdIBDmJuhLmG7MKgaGdWOCDf1gy7ry9Zz9MPAqDPN uss5E1kuMIO58XtufZPlFx1Ti980o1LHqEyxtwDLar1H3JHZPWZfloA7uF7WmE5i tpp5JFrRRcOLL+OOR649eMjbXXFrjwHYXW5pOi9AWVfNtJqhqjB11aFy2uH4lgBj LBC8OiiMZrWVI6ZTFQUVfQA/R2ntHpNB7VZwVDGjnIJBfLlacaL5WC45OntNtXtV tcVm3g0gwsWxBaBDYR5AMZLKq0ZkpRsdTC+3gVZbeTwNrw4EqsdNPm346vFOdnh1 s6ur1a4cje19GpWgDzpS8oPVxAHtzAUp5EwL/xtForSuOrg8f59+C4PVGJZGLy6h 0P3ssBrw24S5XsKn28N0P/uM42Ue8TRNVBt4GRY3dO+kua53/2O7v+GeY8lgUd9v S25p3vSjAauEQfkm/jhBMoczaIfPGeF9chg+MNH2TMstafQc3+UtGIwEu8Q4VH8t gZvRaxna6+QqR1tnqedTlQqR9/so0QVaM+QR7Kx21/F+fPYOGE8= =uXq5 -----END PGP SIGNATURE-----