Bugzilla – Bug 1184424
VUL-1: CVE-2021-20308: htmldoc: htmldoc: Integer overflow in image_load_gif()
Last modified: 2022-09-20 11:24:50 UTC
rh#1946289 Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181. Upstream bug: https://github.com/michaelrsweet/htmldoc/issues/423 References: https://bugzilla.redhat.com/show_bug.cgi?id=1946289 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-20308 https://github.com/michaelrsweet/htmldoc/issues/423 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20308
openSUSE:Factory and openSUSE:Leap:15.2 are also affected.
This is an autogenerated message for OBS integration: This bug (1184424) was mentioned in https://build.opensuse.org/request/show/896496 15.2+Backports:SLE-12-SP1+Backports:SLE-15-SP1+Backports:SLE-15-SP2+Backports:SLE-15-SP3 / htmldoc
This is an autogenerated message for OBS integration: This bug (1184424) was mentioned in https://build.opensuse.org/request/show/896576 Factory / htmldoc
This is an autogenerated message for OBS integration: This bug (1184424) was mentioned in https://build.opensuse.org/request/show/898400 Backports:SLE-15-SP3 / htmldoc https://build.opensuse.org/request/show/898404 Backports:SLE-15-SP2 / htmldoc https://build.opensuse.org/request/show/898407 15.2 / htmldoc https://build.opensuse.org/request/show/898413 Backports:SLE-12-SP1 / htmldoc https://build.opensuse.org/request/show/898416 Backports:SLE-15-SP1 / htmldoc
openSUSE-SU-2021:0882-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1184424 CVE References: CVE-2021-20308 JIRA References: Sources used: openSUSE Leap 15.2 (src): htmldoc-1.9.12-lp152.4.3.1
openSUSE-SU-2021:0893-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1184424 CVE References: CVE-2021-20308 JIRA References: Sources used: openSUSE Backports SLE-15-SP2 (src): htmldoc-1.9.12-bp152.4.3.1
openSUSE-SU-2021:0895-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1184424 CVE References: CVE-2021-20308 JIRA References: Sources used: openSUSE Backports SLE-15-SP1 (src): htmldoc-1.9.12-bp151.4.3.1
This is an autogenerated message for OBS integration: This bug (1184424) was mentioned in https://build.opensuse.org/request/show/901589 Backports:SLE-12-SP1 / htmldoc
openSUSE-SU-2021:0988-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1184424 CVE References: CVE-2021-20308 JIRA References: Sources used: openSUSE Backports SLE-15-SP3 (src): htmldoc-1.9.12-bp153.2.3.1
# maintenance_jira_update_notice openSUSE-SU-2021:1266-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1184424 CVE References: CVE-2021-20308 JIRA References: Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): htmldoc-1.8.28-6.1
Package submitted into 11/htmldoc.
SUSE-SU-2022:14898-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1158802,1184424,1195758 CVE References: CVE-2019-19630,CVE-2021-20308,CVE-2022-0534 JIRA References: Sources used: Subscription Management Tool for SUSE Linux Enterprise 11-SP3 (src): htmldoc-1.8.27-170.4.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Done, closing.