This folder should at least contain the following uploads: corefiles4h2t-mg9-i586.tar.xz Folder containing two core files, sources and binaries of html2text-2.0.0 for a Mageia 9 snapshot as of June 2023. The gdb backtrace and disassembly of htmlparser_yylex revealing some potentially malicious or as initially supposed - wrongly compiled code are commented in the README and gdb-debug.log. Minimal chroot environments used to compile html2text (and possibly gcc or clang) and reproduce the error: chroot4html2text-mg9-i586-1.tar.xz chroot4html2text-mg9-i586-2.tar.xz chroot4html2text-mg9-i586-3.tar.xz chroot4html2text-mg9-amd64-1.tar.xz chroot4html2text-mg9-amd64-2.tar.xz chroot4html2text-mg9-amd64-3.tar.xz The rpm-packages contained in these zip files have been organized in collections like under the Slackware distribution. You can install them ignoring possibly unwanted dependencies like the Linux kernel, gtk-doc or whatever; see also ./packit in the -src-1.tar.xz. .src.rpm-s, zip-packing: chroot4html2text-mg9-src-1.tar.xz ... .src.rpm-s of .rpm-s of the most basic collections, scripts, package index files chroot4html2text-mg9-src-2.tar.xz ... .src.rpm-s of .rpm-s of the remaining collections chroot4html2text-mg9-src-3.tar.xz ... manually downloaded builddeps as .src.rpm-s html2text-2.0.0 + runtime environment for OpenSuSE Leap 15.4 chroot4html2text-oS-amd64-mini.tar.xz This proves that just a very many distributions/arches may be affected. Some instructions for a quick test of your own distro are in the README of corefiles4h2t-mg9-i586.tar.xz. related bug reports, filed so far: https://bugs.mageia.org/show_bug.cgi?id=32044 https://bugs.mageia.org/show_bug.cgi?id=32045 https://github.com/grobian/html2text/issues/54 Everything shall fit on a DVD, including some additional packages you may want to supplement. Elmar Stellnberger, So 02 Jul 2023 16:16:17 CEST Mo 03 Jul 2023 13:45:11 CEST: some important amendments to the README.txt of corefiles4h2t-mg9-i586.tar.xz.