Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 4928-1] htmldoc security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 4928-1] htmldoc security update


Chronologisch Thread 
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 4928-1] htmldoc security update
  • Date: Wed, 9 Jun 2021 21:09:32 +0000
  • Authentication-results: mail02.piratenpartei.de; dkim=none; spf=none (mail02.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 82.195.75.100) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
  • List-archive: https://lists.debian.org/msgid-search/20210609210932.GA19453 AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=/IFI6sIte+YIiUOkFTQoQghrsWLvUQ4Uoyt67O9Iz14=; b=ip 7n5v76cwgoWqVQQqN+mTdcPMHIeuWvqobR/egCDJnsyL9QcDOfTmRakt6nTVpEbdR8KkadQO91YGk zCtcypt0qISYi/rCnnRvt1/btM5gAxBXB41JBj87d1CHAOU75LhaJqhlk2kyJ7M5laUi6N8kfyzMJ RkCIO8yVkpCfFXozd2DUssAajLB4cPZ19sCLzSsfi/RlJQCyD5VK0rU1vaCDef26vKo2IP42g0FH5 m19e+lP9HB2q8X4iGqg1JlmX4nZe8PLIy1j6mymHNxDkJ466eGLi+Of8Y+Du/hvr72+snykyNKOLP zomhc4VCDguh62OgYMRfV8tBYhV1v0Gg==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Wed, 9 Jun 2021 21:09:53 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <vi9273ZiK8I.A.ZGC.h4SwgB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4928-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
June 09, 2021 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : htmldoc
CVE ID : CVE-2021-23158 CVE-2021-23165 CVE-2021-23180
CVE-2021-23191 CVE-2021-23206 CVE-2021-26252
CVE-2021-26259 CVE-2021-26948

A buffer overflow was discovered in HTMLDOC, a HTML processor that
generates indexed HTML, PS, and PDF, which could potentially result in
the execution of arbitrary code. In addition a number of crashes
were addressed.

For the stable distribution (buster), these problems have been fixed in
version 1.9.3-1+deb10u2.

We recommend that you upgrade your htmldoc packages.

For the detailed security status of htmldoc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/htmldoc

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=AxaN
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 4928-1] htmldoc security update, Moritz Muehlenhoff, 09.06.2021

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang