UbuntuUpdates.org

Package "htmldoc"

Name: htmldoc

Description:

HTML processor that generates indexed HTML, PS, and PDF

Latest version: 1.9.18-1ubuntu0.1
Release: oracular (24.10)
Level: security
Repository: universe
Homepage: https://www.msweet.org/htmldoc/

Links


Download "htmldoc"


Other versions of "htmldoc" in Oracular

Repository Area Version
base universe 1.9.18-1
updates universe 1.9.18-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.9.18-1ubuntu0.1 2025-01-23 02:06:54 UTC

  htmldoc (1.9.18-1ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2024-46478.patch: Fix buffer overflow when
      handling tabs by changing lineptr check when looping
    - CVE-2024-46478
  * SECURITY UPDATE: Out of bounds write
    - debian/patches/CVE-2024-45508.patch: Don't strip leading
      whitespace from whitespace-only node, check temp->data[1]
      isn't a NULL terminator
    - CVE-2024-45508

 -- Bruce Cable <email address hidden> Wed, 22 Jan 2025 15:39:13 +1100

CVE-2024-46478 HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
CVE-2024-45508 HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace



About   -   Send Feedback to @ubuntu_updates