-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: s390x Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: c8aaece9c8572ef3d5546efcd3a9c2d8a218a2f5 1351000 lynx-dbgsym_2.8.9rel.1-3+deb10u1_s390x.deb aa7d362e36482d16caa07a56fa42675ab26a097a 6897 lynx_2.8.9rel.1-3+deb10u1_s390x-buildd.buildinfo 8a05d3677e239bfadb11d54b66ed2ec0b6553310 592188 lynx_2.8.9rel.1-3+deb10u1_s390x.deb Checksums-Sha256: b4a92bbdfdb4d2133f55ff47da978ff12ccefd7586730a825433b17ab3185a54 1351000 lynx-dbgsym_2.8.9rel.1-3+deb10u1_s390x.deb 62108e1d5fe9ea7dc727bed93f16d559bce90ccab6a80ef330c360bb56edafdd 6897 lynx_2.8.9rel.1-3+deb10u1_s390x-buildd.buildinfo 83976e28101de258b7c000248b54d0fbbd3d5d3184da1a928a668f8dd3ab7bb2 592188 lynx_2.8.9rel.1-3+deb10u1_s390x.deb Files: 9e4fb8e54953d3f3936db95d63b413d3 1351000 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_s390x.deb f0cfebc5fa0fbdad6e809870f52ea27f 6897 web optional lynx_2.8.9rel.1-3+deb10u1_s390x-buildd.buildinfo d3f1b1ca382d3a9313c7d187de470da5 592188 web optional lynx_2.8.9rel.1-3+deb10u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEojOFpcHXAua7nE2yC6cttUtB7SYFAmER2B0ACgkQC6cttUtB 7SYOIw//XkAV00vkspsgLLRnHcWjnxTJdan1WKQ5XAGFtJduNZK2u/1lDrAxFUWc t1JkOWNnjB/vD2e9SuR9gfhZqNHrHvupDTkPHUIkOIKGXX8Z/AT9ogRiqxS1j8Y9 W3nAyaU7cF8giSbD6Y2Ne3LsRbhqhz161k+/4KNmUeTfi6xxbIpOjkk01DtkT3V4 CghYEhjpjaXgLuxbrVYRvLR7dvO1VkyQTs+Isn+oVULaEzxTkfbDh8Apa0VMF3OV lMTHOaFRyLEWKLgh7wXDQsMOxvQkCXXg1i8JECMpS73QqWTSVDj8wSV5o6CR404M fAec4s/GWdtcfATHh9m+a/v4W2YdO/5+NAr9EMVQMTYMgu3DkEPnskKv0Y9lTpqm C2xrSEYcUUPqKj63yycA2rnK4aMYeulr6/lN7h8pFSxlxWanwwWDsS6oAvMyYr6s gZ+mhSmuemBXvqv7jSBfPpS7dQeAQzW+jqgbjWxKkD/ty5Rh27aIOm5XJefK9EkH HYU4hzU2qTOmeqYhsURf/AGvjXQLgWP9uhctnRAcAAnyuybJBHlqQ1VzAMb+Eh4J FjqfTlNGA+fcwGD5gS6ItWQZIWSG2S08AuwfoEuSKrOZYOwyYevGAhPuAGstQJPd kKJ4XD6czVvh8NkMPHRt9anHxnD95qc4MDA0LqeN7qw3t9I4IYw= =gk0q -----END PGP SIGNATURE-----