-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Aug 2021 01:54:10 +0200 Source: lynx Binary: lynx lynx-dbgsym Architecture: i386 Version: 2.8.9rel.1-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Axel Beckert Description: lynx - classic non-graphical (text-mode) web browser Closes: 991971 Changes: lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: da4b1e4bf4098edf8e98ad55e839a1b3885e498a 1154708 lynx-dbgsym_2.8.9rel.1-3+deb10u1_i386.deb e130048eec10be95269bb9b6eba8dfca57e04cab 6937 lynx_2.8.9rel.1-3+deb10u1_i386-buildd.buildinfo fa17435cba3ac46eb7d2cf80ffdb42f2837033da 654920 lynx_2.8.9rel.1-3+deb10u1_i386.deb Checksums-Sha256: fc4b08875376c5ae94f281cc70a972f8003323aaf2e8862661d23ccc2ca9d666 1154708 lynx-dbgsym_2.8.9rel.1-3+deb10u1_i386.deb 9c2dfdd71984ba37f0112efbb9cdd1fade906599b6aba9283a4bc7dbc6d4648a 6937 lynx_2.8.9rel.1-3+deb10u1_i386-buildd.buildinfo d5d8779dda96f2105e6ef45206cb67fcb84ae059cda71de143787fc6a1c323e7 654920 lynx_2.8.9rel.1-3+deb10u1_i386.deb Files: e8412ebadef2d4e5a5880f1ed07ad8f4 1154708 debug optional lynx-dbgsym_2.8.9rel.1-3+deb10u1_i386.deb 1e2e36504ea25389be6309c3124cf475 6937 web optional lynx_2.8.9rel.1-3+deb10u1_i386-buildd.buildinfo 8bc64c4065ec76f5477e17cb46fbe421 654920 web optional lynx_2.8.9rel.1-3+deb10u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEeShLnnjT5e2dm1q4H4Xht4aLclgFAmER2B8ACgkQH4Xht4aL clgGJw//bSgwEC4q5yR7sfqoCqb5tisjxijd0dzlXcFPIWQqt3S3l7gHx3eHTWLC PGhU970ejPNcRSXVQK0z9ItWCWr3E3dQgkvQ7imFNv6ozgMxncNoN80pjiRwND8o 7nBBRwxszCipznQFoRlEyZqdgRa6Q1Boz+Icy6AvPbqm9rWdTLTpdWCXhAp0Uo7+ LlQFc74TZVKBKhtVen6aLmkYcDGW8d2rTNsu+pjKa8/5shY120hbuELA0rhlJEt5 nV+lS7iyGjKgr0YHdJOZCrEJHyNCC355gSiPkpfXIruY0+CVw+HBRsr8facvQK5o VZvppkyMnnQ7ySB1gupwyFehz4syVqqPutrSfy+X1bPkXB6HeB0ub3z2IErBapDw p/Kzrd4gBt+eBFZfUGwJpPNNL/cBmcva3ToGi1FEOQ2wbm6rxDRtcVYjAhSGI9oz Y+D8D4OD+BCtpFe7dxZJg64MG6aGtOkAtgWgX9jjOJpww7XDFeyUAuY45mwbM9gw yr8C8TmkGRi1ESkKsl7xy1/AYQuWRvGVY7txFK4diJHgJBn9OvedDhqiHNPRD5B1 jWN8iOBsA15m5+cAwi4p/myt8ACa7LMOxqliSOFv4RQCX62HZ4K74lpzEjq9VexQ TxBk9fXmATDZCfm5mYxh0SlCVT9tovpBxNEYsgmxMXBR2Rp1CGM= =ZETO -----END PGP SIGNATURE-----