-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Dec 2020 19:03:02 +0100 Source: highlight.js Binary: libjs-highlight.js node-highlight.js highlight.js-doc libjs-highlight node-highlight Architecture: source all Version: 8.2+ds-5+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: highlight.js-doc - JavaScript library for syntax highlighting - documentation libjs-highlight - Transitional package for libjs-hightlight.js libjs-highlight.js - JavaScript library for syntax highlighting node-highlight - Transitional package for node-hightlight.js node-highlight.js - JavaScript library for syntax highlighting - NodeJS Changes: highlight.js (8.2+ds-5+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2020-26237 If a website or application renders user provided data it might be affected by a Prototype Pollution. This might result in strange behavior or crashes of applications that do not correctly handle unknown properties. Checksums-Sha1: a45a523ff84963a8adf508d44a48156828fa2ff3 2625 highlight.js_8.2+ds-5+deb9u1.dsc 3bdf1271ff5c95df76694b41f536d9d8a1b2ae26 273573 highlight.js_8.2+ds.orig.tar.gz 5e2678a72e1b219e45454d16671bb3b920e03586 10564 highlight.js_8.2+ds-5+deb9u1.debian.tar.xz 9f1e3cebe00a8b6c79fc559a3a216da32e57f828 269842 highlight.js-doc_8.2+ds-5+deb9u1_all.deb 1e764e8ea088867483b1b6f0267b9667e093dd7a 13154 highlight.js_8.2+ds-5+deb9u1_amd64.buildinfo d551da26bbe72e13223d51a62a0a9ac82ac4deb3 165164 libjs-highlight.js_8.2+ds-5+deb9u1_all.deb a3f41ff14b57c89c9cf51ad49b93471929559d85 22536 libjs-highlight_8.2+ds-5+deb9u1_all.deb 8f14ac52067552c0143af7e27f71172bde80a24e 120846 node-highlight.js_8.2+ds-5+deb9u1_all.deb cb08f02268de3e20a968dd40bd6af0e541b2fec4 22542 node-highlight_8.2+ds-5+deb9u1_all.deb Checksums-Sha256: b559841ce84be73f8cb750723e1504af0dc990fdf414749080d57850f1d1e261 2625 highlight.js_8.2+ds-5+deb9u1.dsc c663dc497c2aa00072ea9937a1d791f0f07e4d86c3ba5149ad27245669af4b24 273573 highlight.js_8.2+ds.orig.tar.gz dc794fe8264ff937d161b9bcc6276b24b8b0a8ed386ad1e492a50b8596d8fe6e 10564 highlight.js_8.2+ds-5+deb9u1.debian.tar.xz b472937c3c2f3eca29610c63f5c19ec99b5aa1a43f608c2c50f02126c3644040 269842 highlight.js-doc_8.2+ds-5+deb9u1_all.deb 23917b27a75b8b191355a93c6ca8fe88feb2816a0b48def99cf49dbe25d7ebce 13154 highlight.js_8.2+ds-5+deb9u1_amd64.buildinfo 1d0a24858029ac75ed0b2f27e83685bbef199760d3803ad3e40154eba524e1e0 165164 libjs-highlight.js_8.2+ds-5+deb9u1_all.deb 89249bb105d8f52a3518c84a7354266376b62e5eb93daf830f1e980699d184fb 22536 libjs-highlight_8.2+ds-5+deb9u1_all.deb f4c0573feecf49913289873c6f5a7c8b34d7bcfa25dfb471f910df1274da9efe 120846 node-highlight.js_8.2+ds-5+deb9u1_all.deb 2f9c7dc3a8c77fab6b8929afd00d4b247c3d9774084c335627bbfe59a6b8d545 22542 node-highlight_8.2+ds-5+deb9u1_all.deb Files: 3c3b7c8ce624f12cdfa31c650cd4bc51 2625 web optional highlight.js_8.2+ds-5+deb9u1.dsc 605ce81b626c430666baaaf30480e421 273573 web optional highlight.js_8.2+ds.orig.tar.gz 402111cd9a521c647deeafc943427046 10564 web optional highlight.js_8.2+ds-5+deb9u1.debian.tar.xz 0466544cec9184b9f990c0f9cf2d3903 269842 doc optional highlight.js-doc_8.2+ds-5+deb9u1_all.deb 078ac43821ed06c6bec20c4468f04c24 13154 web optional highlight.js_8.2+ds-5+deb9u1_amd64.buildinfo ef52c0ca13a6fb487bbbd14167adb1e3 165164 web optional libjs-highlight.js_8.2+ds-5+deb9u1_all.deb e614dafd6c981c1f80b234955ebd6d88 22536 oldlibs extra libjs-highlight_8.2+ds-5+deb9u1_all.deb 6b3524ffaa1f8685f7c9d75b42e02ffc 120846 web optional node-highlight.js_8.2+ds-5+deb9u1_all.deb c4afa5bcd05f05307e146f7b2ef8f4ad 22542 oldlibs extra node-highlight_8.2+ds-5+deb9u1_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl/spjBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR7GJEAC5cvpXL5iRG3oG06gS0gexCbwqPv++ q6pS0mO1r5iuQpcz6MknLZB6XHrVwtueU145k4nSC7zkhs+k35ykxTcyhDx4jxYf Tx6UyN9cKrtB/uzVRnp1VHpOnebV6X4Ddg4lmtxPStxRlXOXNwE1tknbEgs2Y/or PWCWM1fZrcxffJO+Um+XZw7lSLFCSkOfqgz3DQihKssntGcgtmp7ng6TTHkVTkfv ZvD5zR6BeDbPHZpyezt/yR9DpUaM5Rg9CAJ36DI+gs8kmwGJPP27CleN/goYwBah v3RrYe1O2eS56gJsvPqxGrN2HPRYAuvtK6PP2oBQy4HcYTyxJVos4tO1RBue5yYB l3FRPzJ1yCcdYko2Ii4nJlWzo8Pplu1/bvXucLP457AeQPiI5/CpMXGY9jzURO5T YlJssXAhC3B+Ahor/9RnYpOPxk7N89Gb0rzyA7gtVLS8vNGp3P2R1VvnKglA54YO iocq+FLZUbljkNRq+eMMxwviWYkmeYfHMEZpxS5Jm4kf1K3EBqlFk8yUGlJNOhXw BemZM5cdARpNq5wiKr9XQZCTKtbuYwhDppRzYOmQv4MaxGct6rdWaKa6YpTV18PD R0xurdgzHYOLVHSylShTfruGRNkZLnYkx0l1seY7dlVyYTPjWrQOfpQ9xwO6XNw8 +bTOfmz5rlaqMg== =kWR0 -----END PGP SIGNATURE-----