1
0

Compare commits

...

1 Commits

2 changed files with 57 additions and 1 deletions

Submodule htmldoc updated: db696f6a95...0677f71aa3

View File

@@ -0,0 +1,56 @@
<patchinfo>
<issue tracker="cve" id="2024-46478"/>
<issue tracker="bnc" id="1232380">VUL-0: CVE-2024-46478: htmldoc: buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)</issue>
<issue tracker="cve" id="2024-45508"/>
<packager>pgajdos</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for htmldoc</summary>
<description>This update for htmldoc fixes the following issues:
Changes in htmldoc:
- CVE-2024-46478: Fixed buffer overflow when handling tabs through the parse_pre function (bsc#1232380).
- version update to 1.9.23:
* Fixed a regression in list handling that caused a crash for empty list items
(Issue #553)
* Fixed a regression in the number of rendered table of contents levels in PDF
and PostScript output (Issue #554)
- version update to 1.9.22:
* Added a "--without-http" configure option to build without CUPS HTTP/HTTPS
support (Issue #547)
* Updated HTTP/HTTPS support to work with both CUPS 2.x and 3.x.
* Updated the maximum image dimension to prevent integer overflow on 32-bit
platforms (Issue #550)
* Updated the HTML parser to correctly report the line number of errors in files
with more than 2^32-1 lines (Issue #551)
* Fixed a crash bug with certain markdown files (Issue #548)
* Fixed an unrestricted recursion bug when reading and formatting HTML (Issue #552)
- version update to 1.9.21
* Updated HTTP/HTTPS connection error reporting to include the reason.
* Updated markdown parser.
* Updated the HTTP/HTTPS connection timeout to 5 minutes (Issue #541)
* Fixed a bug in the new PDF link code (Issue #536)
* Fixed a bug in the number-up code (Issue #539)
* Fixed a regression in leading whitespace handling (Issue #540)
* Fixed a bug in numbered heading support (Issue #543)
* Fixed a bug with setting the header on the first page (Issue #544)
* Fixed paths in the HTMLDOC snap (Issue #545)
- update to 1.9.20:
* Fix a regression that caused spaces to disappear between some words
* Fix resolution of relative links within a document
- includes changes from 1.9.19:
* Add support for file method in links
* Update markdown support code to mmd
* Fix hyperlinks to subfolders
* Fix export of UTF-8 HTML
* Fix handling of whitespace-only nodes
* Fix case sensitivity of link targets
</description>
<package>htmldoc</package>
</patchinfo>