-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 Sep 2021 13:30:36 +0200 Source: jsoup Architecture: source Version: 1.14.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Closes: 992590 Changes: jsoup (1.14.2-1) unstable; urgency=medium . * Team upload. * Upload to unstable. * New upstream version 1.14.2. - Fix CVE-2021-37714: If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. (Closes: #992590) * Declare compliance with Debian Policy 4.6.0. Checksums-Sha1: c9af64ecf692950dc1fe3e4f062ab544122bff7c 2361 jsoup_1.14.2-1.dsc 4247acea8c8805c5ac538fed833aa50dc971e344 429008 jsoup_1.14.2.orig.tar.xz 2393aa198212aac6e8f5d6e50ea51051405b2e36 5200 jsoup_1.14.2-1.debian.tar.xz fe76804ea444165bc2f8cc471e77a7647f431026 13533 jsoup_1.14.2-1_amd64.buildinfo Checksums-Sha256: ca3a557fbbc75149ee4abbd9ce416dcd542a5fb849c39a422d2cf2a833c4e130 2361 jsoup_1.14.2-1.dsc 03b63c14159f5c6c3113c0774b3ebc7127ba126ec07e338784a0cfbc13b2c0cc 429008 jsoup_1.14.2.orig.tar.xz 9b9996318088372f8db550b4766c7e6e055b1af2cc02b24a60293025aa2ffb36 5200 jsoup_1.14.2-1.debian.tar.xz 4c0fa2e4143993911214e6e9c5d00a49cb64d848e14885dd5b4be6011a8e11d0 13533 jsoup_1.14.2-1_amd64.buildinfo Files: e35a781744a3a936ff394ffdf3479829 2361 java optional jsoup_1.14.2-1.dsc ae0eabf4dc3fdcd29505a137b0f3f2d5 429008 java optional jsoup_1.14.2.orig.tar.xz 7249049c7fee8c2899c8056dffdace61 5200 java optional jsoup_1.14.2-1.debian.tar.xz ba9560e21175db58b2d4f4a932daea32 13533 java optional jsoup_1.14.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmE58M1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkiUMP/1sjEb9lThYlIpOV9SAQQuzNz+zkaEBSK8Vh s6GHNlWYUhGE9Ro3v/zIWChedXbx3lI9qoejajFE94sarVHVza0SVM6AwxUq8Wdh y/cSGe1GSm92gEHOWZ5CBb5XaTk5i9jt7TFRwKQ7ZQrZOiFw95GJbeBc4+IM16pF mFAGjjf0M9ZPt8aI4EY4dKjeR6iBBwbEgy60aDoc45HWy6znQUY/dGtf9p9LXNqA kD/9FDVKK02xUnGKboWZh6ZB8Ce+NW4edMSiD/WHpgiSaQuo2UP7NtfZfMnDw0q0 uAjCjXivDgge/+dNfyE6SByodesyD5BSBTtOm1k0R3BTACrU8nvZ0UKc7poTjf0h OslB/gLeCXx253XpP61W/NkyYYvh1Lj/81f6idQj7MyknR3a3CpLDqf2LAgTGBzI ilhT6AIuKdFU1XAGP000H+4UX+FujAXL6mogwdmHWZKS9rghyAT74WkhW14AFfnq 11242VKgneEoKuMgRewPD6goOkKqPOA7QBUkm2DgU6ux6kZGTEduC96a9lrvm8vQ Khj2zgLv+A1OQgDYD/zs78nfcGSfCLgGcPufCWpLWnnbLbExcBkTWSz9DD94unal 3lxU33hMDlZ/nEFtvWQg79hlhLi8z/nhlnMPPLgKJJz+YtsPnxHnJmPpp01o/BZc o4wfcE6y =mQXF -----END PGP SIGNATURE-----