-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 19 Jan 2023 22:42:19 CET
Source: libitext5-java
Architecture: source
Version: 5.5.13.2-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
b5eeed29d4c34b39bc3283ef58f42706a825cc8c 2578 libitext5-java_5.5.13.2-1+deb11u1.dsc
51a5ca42ef60b3ab3f52067636d4f3072682a5d8 90674404 libitext5-java_5.5.13.2.orig.tar.xz
60d73673d7c17c3dd2e4a4defde4a0f4a4a00dba 197008 libitext5-java_5.5.13.2-1+deb11u1.debian.tar.xz
46a368ef195144958cb233abec4127cc1ec31d84 15277 libitext5-java_5.5.13.2-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
918383357f7b3b0c7b3006f149c0e454feb8f6f4ce4f0ea6d4127b71f2b72768 2578 libitext5-java_5.5.13.2-1+deb11u1.dsc
a8d801f7103336077201783a1a44aae2ffdd4a9f0a420bc3a15b0cbc302d38af 90674404 libitext5-java_5.5.13.2.orig.tar.xz
872552d67c6b00d0500f6dbf8dd87611e1113af7624faa57cc11fbe9dffb32a8 197008 libitext5-java_5.5.13.2-1+deb11u1.debian.tar.xz
adeb521b54180ea3d80b9cd81e5c80c38c71a263bce36f5358239d5a190b8e03 15277 libitext5-java_5.5.13.2-1+deb11u1_amd64.buildinfo
Changes:
libitext5-java (5.5.13.2-1+deb11u1) bullseye-security; urgency=high
.
* Team upload.
* Fix CVE-2021-43113:
It was discovered that the CompareTool of iText, a Java PDF library which
uses the external ghostscript software to compare PDFs at a pixel level,
allowed command injection when parsing a specially crafted filename. Files:
45bc00ad0f6acf8dbbe7faa11c171f7e 2578 java optional libitext5-java_5.5.13.2-1+deb11u1.dsc
1302086fc3ea7f27cf183157474f64a9 90674404 java optional libitext5-java_5.5.13.2.orig.tar.xz
436f01d07efca17919e5af77a576aa41 197008 java optional libitext5-java_5.5.13.2-1+deb11u1.debian.tar.xz
1c2bc8498f02ea446e17cb5598e5465c 15277 java optional libitext5-java_5.5.13.2-1+deb11u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmPJuXtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkncEP/3/v7ULSqOAiAtrAd169hs4sPJjluIR6YUcV kwZt8jrIFj/wkDX5KD/eyif9O0r7DKKSyP4UP1K2HxBNZ2WauclK1UY8R2i8717F I77YvohLf5Wih/PrjQV/TEcNuHeK+S83ossJ6Yo9drGqZpzgkffxDoWdbhFLWwD0 O6Ej2n0m7Ap81WKv7ZFXEaTbLjsDSHiK9l0/T54GNrAy/xNukl6dvbrKZk/ctJP9 ci14WNdUtYp8GTqc+IwIBewiky7muF5IDaEN6vkmI6B+N3gRDnuEY4oC5MsULLJs ofChVRrYnYDfx3qi6QJJmVCgD3KrwrDvrja0747kpcTMF1z1O9UuNQA+DenQmuuk IMCp3c31EJYZPM2wQIAtw2tCeeLkk2HhCmWpbWO3PJlnDKVgx03lkvMruVBNNX46 /GGJ7bGwm6Xeubw56BxQL1uro5gvyjpOArPaywwfFWaSS/rTiRT5pcYTc787q4Zn VYFk9RKcCEQwMP+kagtoTxpzf1NMgNl7tafgl5kL2N47kJCvSPXMvwHiul7LHNB9 +1LeDatrR6VC7jSn0sXyYNLjjnxvbOForjHrcCXVzd7Qxj6+HMi6p6Ewuj6NH74h CkqeI1KIBLHmQAj3GqmEYKUDQYp/+hOOV5cDuFDP7GNnumGb3aq4p3/IyX0T1s43
CRKFP6vQ
=ISNU
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)