Accepted htmldoc 1.9.3-1+deb10u3 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 25 Feb 2022 22:03:02 +0100
Source: htmldoc
Architecture: source
Version: 1.9.3-1+deb10u3
Distribution: buster
Urgency: high
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Changes:
htmldoc (1.9.3-1+deb10u3) buster; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2022-0534
A crafted GIF file could lead to a stack out-of-bounds read,
which could result in a crash (segmentation fault).
* CVE-2021-43579
Converting an HTML document, which links to a crafted BMP file,
could lead to a stack-based buffer overflow, which could result
in remote code execution.
* CVE-2021-40985
A crafted BMP image could lead to a buffer overflow, which could
cause a denial of service.
Checksums-Sha1:
31ff02f579e244264ad5d0abc66d08e121103423 2298 htmldoc_1.9.3-1+deb10u3.dsc
c5b03056bdce4238dfe27ab9e2f80ca9a335dc48 20968 htmldoc_1.9.3-1+deb10u3.debian.tar.xz
f0a346ca5a6084afcc3e62030566bc47c68ab832 8412 htmldoc_1.9.3-1+deb10u3_amd64.buildinfo
Checksums-Sha256:
d979b0e6867f812bced2ae5349ff4807491f4457ab92f15944f1ad03547a4139 2298 htmldoc_1.9.3-1+deb10u3.dsc
08a4e337d8e214a39c24c18242b5d9e50de0842a5cbdf4003d4219a12283afa4 20968 htmldoc_1.9.3-1+deb10u3.debian.tar.xz
6bcd4b1c8c2009cf383e07e5356cc928b187eb12aaf0dafbab2d718e31da8590 8412 htmldoc_1.9.3-1+deb10u3_amd64.buildinfo
Files:
25fbc1b69efc7240b4de9393f65ad426 2298 web optional htmldoc_1.9.3-1+deb10u3.dsc
febf59bc385fa327060076c17d14a79e 20968 web optional htmldoc_1.9.3-1+deb10u3.debian.tar.xz
9fbe1ea703a0b8e47818560d26bdb861 8412 web optional htmldoc_1.9.3-1+deb10u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=+c0u
-----END PGP SIGNATURE-----