-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: mipsel Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-manda-05) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: 70a57bac9db5647f0cb78c9b433a5e96361b5fc9 1341260 lynx-dbgsym_2.8.9rel.1-3+deb10u1_mipsel.deb ca1a628538838c0aa1b342575ad0df5f6537152e 6821 lynx_2.8.9rel.1-3+deb10u1_mipsel-buildd.buildinfo 80a14a737d90ddc536ebec306149b94f4cf6df64 563172 lynx_2.8.9rel.1-3+deb10u1_mipsel.deb Checksums-Sha256: 12016e9447f36ef55ac8ddd80528b3e07a8fb018b6ade6f289799a03bf638e5e 1341260 lynx-dbgsym_2.8.9rel.1-3+deb10u1_mipsel.deb 5505c8f2fece38dba110daacefd01d79650f7477cd61a7a9c7e8855b5a1adc56 6821 lynx_2.8.9rel.1-3+deb10u1_mipsel-buildd.buildinfo a576850f6f864aa606a83088494e1325e379128f09f05cf77b5a455c5ba5b642 563172 lynx_2.8.9rel.1-3+deb10u1_mipsel.deb Files: 51b9a68f4884773a13f2b783471cfd34 1341260 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_mipsel.deb 96938f9e99d09a66f12d27259fa13c93 6821 web optional lynx_2.8.9rel.1-3+deb10u1_mipsel-buildd.buildinfo 005bc42e577b1dd74a7a98bb7b61537f 563172 web optional lynx_2.8.9rel.1-3+deb10u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQ5dTuB/7AkreZZfGPYe+ogkxLY8FAmER2KwACgkQPYe+ogkx LY8OYg//e+hCzcbqD1Jf3fD026cecXnGv5BpjbWsurBNXxbqIsBqkg6S9yUHufd8 +rI0wDbi6bmccCjK0tB+23bHstHeUsCwC1QKDvqp6FV622vcYOJcFwTnZecAZk3r LQrqrztVN61pR0bDKJmfmwIbWe2kUP7RI5UxRNTqmsl5fmOYKQRpExP5nnD2YZsB cKQlyGHCkBaP/rZaNQ8seIQVqFgaifir1KOgdkmj5XsO+goZ98no1JponcEWg0/L lmRvXtlKpYuPOC0lx2z06RqJMfNTndjnix6FJsfM5e/MtdywmVFApZ9UriI45rmh ex0Bi3YONr3XeNK8YKZrgVPbEaPp6KWVE7mhq4WJszTK71I2hJq2L0ABccskfpQn y7Sbn442lC+ay5FzXmFHzpdMp3H2j0iTAaqxdY5GIXHtgVNr2L6lejtd24pm2zlC bYoPh52qpKCePXSXh+6CqXm29w23vuB6e5Ah2LsmBOjjmWsMpLGUZmHANBOrPorr kMlUuDdIGUfybISPNtXCe6itObH+Z2h19w8MPW/nG8ZFwPOhOGoggR46S698z7Xk HzzHchC9UT8xi8lkWBeffIUYAg6ydMa4TCFoxZ4K7J9G2yyZLvCs9ZDCVEPbQLxZ gnr4u6X6FCYcH1acd5zExi7LWskQ2lfpHTe14xq2oaOMc9vRFNs= =59kA -----END PGP SIGNATURE-----