-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Aug 2021 13:36:32 +0200 Source: lynx Architecture: source Version: 2.9.0dev.6-3~deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian Lynx Packaging Team <pkg-lynx-maint@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Closes: 991971 Changes: lynx (2.9.0dev.6-3~deb11u1) bullseye-security; urgency=high . * Rebuild for bullseye-security. . lynx (2.9.0dev.6-3) unstable; urgency=high . * Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of username and password in the TLS 1.2 SNI Extension if username and password were given in the URL, i.e. as https://user:pass@example.org/ (Closes: #991971) Checksums-Sha1: d5ba3abe6c59ef3dc85557c37de7798222642cc3 2560 lynx_2.9.0dev.6-3~deb11u1.dsc bc62d8915a0083c2fe4fa0dc5cf48fd9f83fd9b2 2730690 lynx_2.9.0dev.6.orig.tar.bz2 0517d1a5630ed147597fd350c68c4689ec2c12d2 265 lynx_2.9.0dev.6.orig.tar.bz2.asc 56d4346e26db3235a67ff934e1aab9c45a2929d8 30124 lynx_2.9.0dev.6-3~deb11u1.debian.tar.xz Checksums-Sha256: fb8cf8cfe9dbe879c25002fc670c8ca355f3ec37a91a66b5455e78f7fe344390 2560 lynx_2.9.0dev.6-3~deb11u1.dsc 78f0be7f81f4b84d8d33b45a05145f015e35355109be350e461de5c03abf53b2 2730690 lynx_2.9.0dev.6.orig.tar.bz2 22e3b7394187aef75c7a783f4f789ef8d68b9266a15e747d92bd914563a93180 265 lynx_2.9.0dev.6.orig.tar.bz2.asc 1086daa008f96775df5964341c77b1069b5233eeefbb7b577e49f45763918610 30124 lynx_2.9.0dev.6-3~deb11u1.debian.tar.xz Files: 668fe9e0c5933c238db04d72a47d4cb2 2560 web optional lynx_2.9.0dev.6-3~deb11u1.dsc 86fa225340422f40a9a1a5c4243d8c91 2730690 web optional lynx_2.9.0dev.6.orig.tar.bz2 e56d1480fe48dbd3c39338038ba2430a 265 web optional lynx_2.9.0dev.6.orig.tar.bz2.asc 1bc51a1c4dc71f1ba7fba593df2e0505 30124 web optional lynx_2.9.0dev.6-3~deb11u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmEPxH0ACgkQpU8BhUOC FIRM2w/+L0+Hz6dPyBsIVVL0PUnZoZUHCm05TUT1RB6NJsZ0mMOQbvEJwjzsnVbN 1wwZwUXJa5UgpCvhAfiXeGH2+zVn7S8UfVNQBTRzS8DiTdcrQMk4kjLsiJEac1TV ih13c2XA9H7GYfXfYx6dqMBivERNH63O0XlwV0tESTyoy1++pPPhuETgFzs5KxUK SXox1s9eVD0Ujj7dx4jaLtwlJfqqsYJuyGi+rkRR6UE5WR2S0jWtcEDWqCh0QdWP lwPwC4pGxy6tzWkwbWaEetcI8qhzweQGkp1rUsfBoRczznrParlwWb7VwmCRxxF7 muiGG4OSZ2lWE1H1dV6yIKR314ds0xrYtPJ3LXNvXik4ZLp9zI3Ze+hZ6uc5RF2p t7ax7Tn9dYy2JRRBYXZknKjMbwUpPo1fhRy/eIYz7zCo2CzpSmbhGWBIsYj8VZ8f 7Utg7YakxO2s0rsPcPy/W9f2ZfyrzMKB33MYDmE2lePhL0jYOzmpgbLJnDzKThHe ai5mHthYycnVVPqiAA+XTh155im0DaHfeQcwXZ5BZ+37y0X0QwCMcjRdZ9evA6Tc EcZV6Wbq63qULy1xaY2wB8uXJHXy2I6zU9IHpqIHID//IO2rDAFn7sMaAvmwN54/ /CvH4I1X4mIko34p6aFHu+yBMYzHHfsNfxRlaBdJdBTm7/LFDTg= =ECuf -----END PGP SIGNATURE-----