-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Mar 2020 21:08:21 +0100
Source: tika
Binary: libtika-java
Architecture: source all
Version: 1.5-1+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers
<pkg-java-maintain...@lists.alioth.debian.org>
Changed-By: Anton Gladky <gl...@debian.org>
Description:
libtika-java - Apache Tika - content analysis toolkit
Closes: 954302 954303
Changes:
tika (1.5-1+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* CVE-2020-1950
carefully crafted or corrupt PSD file can cause excessive memory
usage in Apache. (Closes: #954303)
* CVE-2020-1951
Infinite Loop (DoS) vulnerability in Apache Tika's PSDParser.
(Closes: #954302)
Checksums-Sha1:
024f2c5584df8e52e7ae9560b0a6ec047685896f 2301 tika_1.5-1+deb8u1.dsc
5d3901f2519968a04d3ed117f6cd3cde43ad2c4c 655724 tika_1.5.orig.tar.xz
e4263aa35f730b9de2e9c81f5f36a7f8a3e05175 11872 tika_1.5-1+deb8u1.debian.tar.xz
11719b03dca0f8f7f29aabb9794a590ec4e6542e 944970
libtika-java_1.5-1+deb8u1_all.deb
Checksums-Sha256:
4127fdb47c13a4750c972f5daae7013e9362970cc076cce4989d8f1e3ab50ef6 2301
tika_1.5-1+deb8u1.dsc
83e6ac41e8494936f83a4b4a2798592802165e78e3599d27fedb1f3f3137eeeb 655724
tika_1.5.orig.tar.xz
0e699205630ae6d39abfb0169f9fccfc98dfc96403cc3f637bccfbf79aee4ee8 11872
tika_1.5-1+deb8u1.debian.tar.xz
d5dedca4336eea58edba68b64e9be92ff2d590a2892adfc72eb01b09f2b9e2c5 944970
libtika-java_1.5-1+deb8u1_all.deb
Files:
e5b2797666ffdb695cb06b2e90bb6d3d 2301 java optional tika_1.5-1+deb8u1.dsc
1950ffcfca3d75a044357655dfd7ba4e 655724 java optional tika_1.5.orig.tar.xz
40df88b495b7049707295d14c705ceba 11872 java optional
tika_1.5-1+deb8u1.debian.tar.xz
a869fa33b290028af87db5909b8753bd 944970 java optional
libtika-java_1.5-1+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----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=H0bE
-----END PGP SIGNATURE-----
