[pkg-lynx-maint] Bug#785383: Bug#785383: lynx: Can't connect to (some) https sites

Andreas Metzler ametzler at bebt.de
Fri May 15 17:16:37 UTC 2015


On 2015-05-15 Axel Beckert <abe at debian.org> wrote:
[...]
> Thanks for that information. So this issue is likely not an issue in
> Lynx per se. Because the version in Jessie works fine on Jessie as I
> can confirm. Looks to me if it's a combination of the version of
> lynx(-cur) and the GnuTLS library.

Hello,

GnuTLS has become more picky when evaluating priority strings and
lynx is using an incorrect one.

We will need to update lynx in stable, too, since the changed GnuTLS
behavior is an effect of a deliberate change to fix
<http://www.gnutls.org/security.html#GNUTLS-SA-2015-2> which is
labeled as "Minor issue; Can be fixed along with a future DSA" on
<https://security-tracker.debian.org/tracker/TEMP-0000000-8E8BA8>.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



More information about the pkg-lynx-maint mailing list