Groups > linux.debian.announce.security > #3461

[SECURITY] [DSA 4928-1] htmldoc security update

Path	csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod
From	Moritz Muehlenhoff <jmm@debian.org>
Newsgroups	linux.debian.announce.security
Subject	[SECURITY] [DSA 4928-1] htmldoc security update
Date	Wed, 09 Jun 2021 23:20:02 +0200
Message-ID	<CodMe-45I-5@gated-at.bofh.it> (permalink)
X-Original-To	debian-security-announce@lists.debian.org
X-Mailbox-Line	From debian-security-announce-request@lists.debian.org Wed Jun 9 21:09:53 2021
Old-Return-Path	<jmm@seger.debian.org>
X-Amavis-Spam-Status	No, score=-13.624 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, DKIMWL_WL_HIGH=-0.374, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, SARE_RMML_Stock9=0.13] autolearn=ham autolearn_force=no
Old-Dkim-Signature	v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=/IFI6sIte+YIiUOkFTQoQghrsWLvUQ4Uoyt67O9Iz14=; b=ip 7n5v76cwgoWqVQQqN+mTdcPMHIeuWvqobR/egCDJnsyL9QcDOfTmRakt6nTVpEbdR8KkadQO91YGk zCtcypt0qISYi/rCnnRvt1/btM5gAxBXB41JBj87d1CHAOU75LhaJqhlk2kyJ7M5laUi6N8kfyzMJ RkCIO8yVkpCfFXozd2DUssAajLB4cPZ19sCLzSsfi/RlJQCyD5VK0rU1vaCDef26vKo2IP42g0FH5 m19e+lP9HB2q8X4iGqg1JlmX4nZe8PLIy1j6mymHNxDkJ466eGLi+Of8Y+Du/hvr72+snykyNKOLP zomhc4VCDguh62OgYMRfV8tBYhV1v0Gg==;
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
User-Agent	Mutt/1.10.1 (2018-07-13)
X-Debian	PGP check passed for security officers
Priority	urgent
Reply-To	debian-security-announce-request@lists.debian.org
X-Mailing-List	<debian-security-announce@lists.debian.org> archive/latest/3819
List-ID	<debian-security-announce.lists.debian.org>
List-URL	<http://lists.debian.org/debian-security-announce/>
List-Archive	https://lists.debian.org/msgid-search/20210609210932.GA19453@seger.debian.org
Approved	robomod@news.nic.it
Lines	49
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Wed, 9 Jun 2021 21:09:32 +0000
X-Original-Message-ID	<20210609210932.GA19453@seger.debian.org>
Xref	csiph.com linux.debian.announce.security:3461

Show key headers only | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4928-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
June 09, 2021                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : htmldoc
CVE ID         : CVE-2021-23158 CVE-2021-23165 CVE-2021-23180
                 CVE-2021-23191 CVE-2021-23206 CVE-2021-26252
		 CVE-2021-26259 CVE-2021-26948

A buffer overflow was discovered in HTMLDOC, a HTML processor that
generates indexed HTML, PS, and PDF, which could potentially result in
the execution of arbitrary code. In addition a number of crashes
were addressed.

For the stable distribution (buster), these problems have been fixed in
version 1.9.3-1+deb10u2.

We recommend that you upgrade your htmldoc packages.

For the detailed security status of htmldoc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/htmldoc

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=AxaN
-----END PGP SIGNATURE-----

Back to linux.debian.announce.security | Previous | Next | Find similar | Unroll thread

Thread

[SECURITY] [DSA 4928-1] htmldoc security update Moritz Muehlenhoff <jmm@debian.org> - 2021-06-09 23:20 +0200

csiph-web