SUSE-SU-2022:14898-1
- Source
- https://www.suse.com/support/update/announcement/2022/suse-su-202214898-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:14898-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2022:14898-1
- Related
- Published
- 2022-02-28T13:33:19Z
- Modified
- 2022-02-28T13:33:19Z
- Summary
- Security update for htmldoc
- Details
-
This update for htmldoc fixes the following issues:
- CVE-2019-19630: Fixed stack-based buffer overflow in the hd_strlcpy() function in string.c via a crafted HTML document (bsc#1158802).
- CVE-2021-20308: Fixed integer overflow in imageloadgif() (bsc#1184424).
- CVE-2022-0534: Fixed stack out-of-bounds read in gifgetcode() when opening a malicious GIF file results in a segmentation fault (bsc#1195758).
- References
-
- https://www.suse.com/support/update/announcement/2022/suse-su-202214898-1/
- https://bugzilla.suse.com/1158802
- https://bugzilla.suse.com/1184424
- https://bugzilla.suse.com/1195758
- https://www.suse.com/security/cve/CVE-2019-19630
- https://www.suse.com/security/cve/CVE-2021-20308
- https://www.suse.com/security/cve/CVE-2022-0534