[pkg-lynx-maint] Bug#991971: marked as done (lynx: [CVE-2021-38165] SSL certificate validation fails with URLs containing user name or user name and password, i.e. https://user:password at host/ and https://user at host/\; leaks password in clear text via SNI)

Debian Bug Tracking System owner at bugs.debian.org
Fri Aug 27 12:21:16 BST 2021


Your message dated Fri, 27 Aug 2021 11:19:43 +0000
with message-id <E1mJZtf-000FmB-MM at fasolo.debian.org>
and subject line Bug#991971: fixed in lynx 2.8.9rel.1-3+deb10u1
has caused the Debian Bug report #991971,
regarding lynx: [CVE-2021-38165] SSL certificate validation fails with URLs containing user name or user name and password, i.e. https://user:password@host/ and https://user@host/\; leaks password in clear text via SNI
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
991971: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991971
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Axel Beckert <abe at debian.org>
Subject: lynx: SSL certificate validation fails with URLs containing user name or user name and password, i.e. https://user:password@host/ and https://user@host/
Date: Fri, 06 Aug 2021 23:43:13 +0200
Size: 4324
URL: <http://alioth-lists.debian.net/pipermail/pkg-lynx-maint/attachments/20210827/deeb69b4/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#991971: fixed in lynx 2.8.9rel.1-3+deb10u1
Date: Fri, 27 Aug 2021 11:19:43 +0000
Size: 5955
URL: <http://alioth-lists.debian.net/pipermail/pkg-lynx-maint/attachments/20210827/deeb69b4/attachment-0001.eml>


More information about the pkg-lynx-maint mailing list