CVE-2024-46478

HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.

HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node. (CVE-2024-45508) HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681. (CVE-2024-46478)

This update for htmldoc fixes the following issues:

• CVE-2024-46478: Fixed a buffer overflow when handling tabs through the parse_pre function (boo#1232380).

These are all security issues fixed in the htmldoc-1.9.18-3.1 package on the GA media of openSUSE Tumbleweed.

This update for htmldoc fixes the following issues:

Changes in htmldoc:

• CVE-2024-46478: Fixed buffer overflow when handling tabs through the parse_pre function (bsc#1232380).

• version update to 1.9.23:

  • Fixed a regression in list handling that caused a crash for empty list items (Issue #553)
  • Fixed a regression in the number of rendered table of contents levels in PDF and PostScript output (Issue #554)

• version update to 1.9.22:

  • Added a "--without-http" configure option to build without CUPS HTTP/HTTPS support (Issue #547)
  • Updated HTTP/HTTPS support to work with both CUPS 2.x and 3.x.
  • Updated the maximum image dimension to prevent integer overflow on 32-bit platforms (Issue #550)
  • Updated the HTML parser to correctly report the line number of errors in files with more than 2^32-1 lines (Issue #551)
  • Fixed a crash bug with certain markdown files (Issue #548)
  • Fixed an unrestricted recursion bug when reading and formatting HTML (Issue #552)

• version update to 1.9.21

  • Updated HTTP/HTTPS connection error reporting to include the reason.
  • Updated markdown parser.
  • Updated the HTTP/HTTPS connection timeout to 5 minutes (Issue #541)
  • Fixed a bug in the new PDF link code (Issue #536)
  • Fixed a bug in the number-up code (Issue #539)
  • Fixed a regression in leading whitespace handling (Issue #540)
  • Fixed a bug in numbered heading support (Issue #543)
  • Fixed a bug with setting the header on the first page (Issue #544)
  • Fixed paths in the HTMLDOC snap (Issue #545)

• update to 1.9.20:

  • Fix a regression that caused spaces to disappear between some words
  • Fix resolution of relative links within a document

• includes changes from 1.9.19:

  • Add support for ‘file’ method in links
  • Update markdown support code to mmd
  • Fix hyperlinks to subfolders
  • Fix export of UTF-8 HTML
  • Fix handling of whitespace-only nodes
  • Fix case sensitivity of link targets

It was discovered that HTMLDOC incorrectly handled memory in the image_set_mask, git_read_lzw, write_header and write_node functions, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0137, CVE-2022-24191, CVE-2022-34033, CVE-2022-34035)

It was discovered that HTMLDOC incorrectly handled memory in the gif_get_code function, which could lead to a segmentation fault. If a user or application were tricked into opening a crafted GIF file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0534)

It was discovered that HTMLDOC did not perform proper bounds checks on image dimensions when loading JPEG images, which could lead to a buffer overflow. If a user or application were tricked into opening a crafted JPEG image, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-27114)

It was discovered that HTMLDOC incorrectly handled memory in the pdf_write_names function, which could lead to a heap buffer overflow. If a user or application were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or leak sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-28085)

It was discovered that HTMLDOC could be made to write out of bounds when attempting to strip whitespace. An attacker could use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-45508)

It was discovered that HTMLDOC incorrectly handled memory in the parse_pre function, which could lead to a heap buffer overflow. If a user or application were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-46478)