Описание
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| htmldoc | fixed | 1.9.18-2 | package | |
| htmldoc | no-dsa | bookworm | package | |
| htmldoc | postponed | bullseye | package |
Примечания
https://github.com/michaelrsweet/htmldoc/issues/528
https://github.com/michaelrsweet/htmldoc/commit/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2
in issue #528 a regression was mentioned that should be fixed by:
https://github.com/michaelrsweet/htmldoc/commit/aaffa753c0dfe1b82a43051847f77c582e32a235
but this commit is basically a revert of the initial fix
attention: in version 1.9.19 a new string pool was introduced
Связанные уязвимости
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.