-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-57287bd052 2021-09-24 20:04:10.610479 -------------------------------------------------------------------------------- Name : lynx Product : Fedora 35 Version : 2.8.9 Release : 13.fc35 URL : https://lynx.browser.org/ Summary : A text-based Web browser Description : Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages. -------------------------------------------------------------------------------- Update Information: - fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 31 2021 Kamil Dudka- 2.8.9-13 - fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1994998 - CVE-2021-38165 lynx: Disclosure of HTTP authentication credentials via SNI data https://bugzilla.redhat.com/show_bug.cgi?id=1994998 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-57287bd052' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure