-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 07 Aug 2023 18:27:07 +0200 Source: libhtmlcleaner-java Binary: libhtmlcleaner-java libhtmlcleaner-java-doc Architecture: all Version: 2.24-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Markus Koschany Description: libhtmlcleaner-java - Java HTML Parser library libhtmlcleaner-java-doc - Java HTML Parser library (documentation) Changes: libhtmlcleaner-java (2.24-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2023-34624: A security vulnerability has been discovered in libhtmlcleaner-java, a Java HTML parser library. An attacker was able to cause a denial of service (StackOverflowError) if the parser runs on user supplied input with deeply nested HTML elements. This update introduces a new nesting depth limit which can be overridden in cleaner properties. Checksums-Sha1: c4ad9896417d6034a8c739ec91bdd6cd7c26e138 235284 libhtmlcleaner-java-doc_2.24-1+deb11u1_all.deb 9515c974d4ed570c24bd698e27a1152969e88ddd 15178 libhtmlcleaner-java_2.24-1+deb11u1_all-buildd.buildinfo 9ed487f8c232af6daede071b72050c41dd5f5c24 175116 libhtmlcleaner-java_2.24-1+deb11u1_all.deb Checksums-Sha256: 5d6adc1e0124c9238424675f4acbd9128c4f51e7e6f1f5ebf10b8b9ff99668cd 235284 libhtmlcleaner-java-doc_2.24-1+deb11u1_all.deb 38c6c30f32960148772ee1735fd5589ea1dae77605967dd7b0a7a013b59f16f4 15178 libhtmlcleaner-java_2.24-1+deb11u1_all-buildd.buildinfo dadddcb68ddff22f63df0f1cc050556e6387ab64b1271afee5e8f75054694d4c 175116 libhtmlcleaner-java_2.24-1+deb11u1_all.deb Files: c058f64504d82043ff7942f14285abbf 235284 doc optional libhtmlcleaner-java-doc_2.24-1+deb11u1_all.deb 0926f0c306f9a3fbe065b602f2e7ac82 15178 java optional libhtmlcleaner-java_2.24-1+deb11u1_all-buildd.buildinfo 7db68771967de2fecd591ce40028937d 175116 java optional libhtmlcleaner-java_2.24-1+deb11u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtzb3SVunlrB0F8t8ExOkVqF4GXMFAmTRIpgACgkQExOkVqF4 GXPM2w//bFqyVP49uzzmmrbdmvW7onXrs3m2c/AtReiHArXmSkaYWGKbehvVyuZr efND+eawqqiMqWz2koW8PebIL1w/zMASfbsN9VjgVxkshgGs2eqAkRVbk6yubM1y WXACeAWqxa/Ks5PYU9fsSEsfA7HBS1Y8YY9O+9FxXAZjNPbPXx7FTQ18EE5Ihlmu 3hMwMvlHqMd3uoT6T1FOMWwcraW2AUz07YIFHt4Rt3iRLKwOiArAS3uG1fctuELz N4VpXwbBzwWGWwPXp4nZBAbQVuNtYt4eVSRbDtF7C1gM5SsYOcxdssbCdE1tXf27 M9EhgLmJ/kneBMnrlTHLWW3OYsbZ3ublG5NHffD3XwVVxI4Tv4tvCvDUFACPGu8p 257Uq4bcV4SFRbxdycyjxk9ryN5NA791SgNUOHl0A3znC1PluevufY9OjF2B1QFT lMXprCrZzIf6QUoJcXYfCc5K5EaGzjXLKT/5GJUY0UjgAh+1DUrCt4nsHB4mhx6/ U41crFeU0YqgfSPchnfCsZzj7E6UYkmjPBYDjU4gwPpEFc/8l4S/fbId6QLpslk5 gSc6fHrPRszACLIHxzJX2AIHpl0Qlz1hU5sCag+CrSe91xEoA8rmzWkgKKi+KgzP Xs1gA/A2U1f2QzbNl6PYf5drG+kLBTVuXvl2d3lrECJfhf5zFg8= =ecKK -----END PGP SIGNATURE-----