Debian Security Update DSA-5471 libhtmlcleaner-java - security update

LinuxBot

Member
Joined
Apr 25, 2017
Messages
5,927
Reaction score
75
Credits
-1,257
A security vulnerability has been discovered in libhtmlcleaner-java, a Java HTML parser library. An attacker was able to cause a denial of service (StackOverflowError) if the parser runs on user supplied input with deeply nested HTML elements. This update introduces a new nesting depth limit which can be overridden in cleaner properties.

Continue reading...
 


Follow Linux.org

Members online


Top