Accepted lynx 2.8.9rel.1-3+deb10u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 10 Aug 2021 01:54:10 +0200
Source: lynx
Architecture: source
Version: 2.8.9rel.1-3+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Lynx Packaging Team <pkg-lynx-maint@lists.alioth.debian.org>
Changed-By: Axel Beckert <abe@debian.org>
Closes: 991971
Changes:
lynx (2.8.9rel.1-3+deb10u1) buster-security; urgency=high
.
* Apply fix from Lynx 2.9.0dev.9 for CVE-2021-38165 to fix leakage of
username and password in the TLS 1.2 SNI Extension if username and
password were given in the URL, i.e. as https://user:pass@example.org/
(Closes: #991971)
Checksums-Sha1:
f8c7f55657011b3a391a4b2a03bab682e3f7497f 2560 lynx_2.8.9rel.1-3+deb10u1.dsc
3e00ac30d008e0aa879bfd037abcfd9c0dd2faec 2689171 lynx_2.8.9rel.1.orig.tar.bz2
60ad87a45201396c291931d86411f35a8a4af97f 251 lynx_2.8.9rel.1.orig.tar.bz2.asc
e2f097c682aa263db6b72094ebc60f17e0c06811 29404 lynx_2.8.9rel.1-3+deb10u1.debian.tar.xz
4e3a35e0dbb518150f6890c33fde4ba77ea63566 7143 lynx_2.8.9rel.1-3+deb10u1_source.buildinfo
Checksums-Sha256:
bbab09e6482a4f433fc6063cc34f0353882b9fb4dfc10c8987959e58db00b312 2560 lynx_2.8.9rel.1-3+deb10u1.dsc
387f193d7792f9cfada14c60b0e5c0bff18f227d9257a39483e14fa1aaf79595 2689171 lynx_2.8.9rel.1.orig.tar.bz2
2cb6cf09763d58ec6951bc0bf4cf2836983756fb168f486d30f0a3921304408b 251 lynx_2.8.9rel.1.orig.tar.bz2.asc
0578691571d26b702748845e0acf2436e04b9c75b9e7d643465c23a1170bb8f4 29404 lynx_2.8.9rel.1-3+deb10u1.debian.tar.xz
fb0a2488cc3ad65e194f2fd9a74d74a6c517deac5808a72b9631c8001ee762d2 7143 lynx_2.8.9rel.1-3+deb10u1_source.buildinfo
Files:
ac5876d02e4878400ebbea60e6481107 2560 web optional lynx_2.8.9rel.1-3+deb10u1.dsc
44316f1b8a857b59099927edc26bef79 2689171 web optional lynx_2.8.9rel.1.orig.tar.bz2
d0cd3214b950926ddfc88a7c6d35cec8 251 web optional lynx_2.8.9rel.1.orig.tar.bz2.asc
e45c95752470dc4a06b9d9e4f0e865f6 29404 web optional lynx_2.8.9rel.1-3+deb10u1.debian.tar.xz
12020315232c68b3b4e1b58948e4ffb0 7143 web optional lynx_2.8.9rel.1-3+deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=okwX
-----END PGP SIGNATURE-----