-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Aug 2021 02:27:54 +0200 Source: lynx Architecture: source Version: 2.9.0dev.6-3 Distribution: unstable Urgency: high Maintainer: Debian Lynx Packaging Team <pkg-lynx-maint@lists.alioth.debian.org> Changed-By: Axel Beckert <abe@debian.org> Closes: 991971 Changes: lynx (2.9.0dev.6-3) unstable; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: 5f937346d99e0d01de955a829f751e4b6871175c 2528 lynx_2.9.0dev.6-3.dsc 6afae746bcf520c0804b2157225e4a249b3fddb4 30108 lynx_2.9.0dev.6-3.debian.tar.xz c218df88acf8db06ba8a5fcfe389b976229dd12b 7461 lynx_2.9.0dev.6-3_amd64.buildinfo Checksums-Sha256: 095581d1a918999debdd30b9f992e3a35c3f56ca38e1f73b897296024defa7c2 2528 lynx_2.9.0dev.6-3.dsc 45f6c27005c91b8cda7ac842718e94f91e94d634d8e900b725dbfa485fec64aa 30108 lynx_2.9.0dev.6-3.debian.tar.xz 767503cfcb00e5b44c860bd76d7404fdaf11cb217f41150627ccc143ef2a6871 7461 lynx_2.9.0dev.6-3_amd64.buildinfo Files: b10cfed6b228f4a3fef7ae3054cd6ab2 2528 web optional lynx_2.9.0dev.6-3.dsc c98f545749c1dde4de8c6563103029c8 30108 web optional lynx_2.9.0dev.6-3.debian.tar.xz 114a847958642854386d66b0808e5903 7461 web optional lynx_2.9.0dev.6-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERoyJeTtCmBnp12Ema+Zjx1o1yXUFAmEPLNcACgkQa+Zjx1o1 yXXskg/8CepC8oblzdBpFpQq94gQ9dYhSs2uweGcR3h7dTl0jWnU6yJMviHdRDM5 craRLo6boB5YsySFROwy2DqVa4il3M6bjzLFvTTMAz3+f7o5r89HgQuweq1HM7DJ A1HPZFXXPRxbDK0fm/pzzzmOsjQ9XyCuBS/QgWiDLkZ0pcHB7cIET2snmkubd1gu hfOeAw9ZXBwsM1zP+4p5RmzV+j4sMKy6pnQ1Rf5NMSo5/6OtYwseRNxWz3i0LqyC VL0HCOaY7+LlZ3PgM1msHhjUG/utZhd/dqsDgEesEARpsR18ld+lm6nOlktSmMv4 MDrbZgBTkvbibhqIrWHfuwUYHmxFeDVeSy12BNMq06PaVRAx+fgblWKh4hf/1WNb QCFg43HAXm1NjfrWx0upo2HXLrSb6/H2NbIh5dLv8Rmd2d2UbpW+ewv9B2Oy3B7Q loG9ada5XxNIVUCa+/w3RIpy/0MWuxF2YVGqDJkEMdBM/g9jkINJyQ8tr9mWlOgG G4wvP1S/W5nimisf5hx59H6lGlCmIz2LRDebBSd9DD3rKG51cPN8NrqD1G8mBy6+ DDFEGyknpAtku2haxJ5kvhbsytu+xVBM488Wo5svrsDehzhRwZFX8FCf/HG12xDc hJlB75U7k9L1rYjKqDjGd13rLRMIX91wP0kGwXurDHDqHoo9YGg= =OCyx -----END PGP SIGNATURE-----