openSUSE-SU-2026:20219-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20219-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20219-1
Upstream
CVE (2)
Related
Published
2026-02-13T16:07:48Z
Modified
2026-03-23T04:54:48Z
Summary
Security update for htmldoc
Details

This update for htmldoc fixes the following issues:

Changes in htmldoc:

  • CVE-2024-46478: Fixed buffer overflow when handling tabs through the parse_pre function (bsc#1232380).

  • version update to 1.9.23:

    • Fixed a regression in list handling that caused a crash for empty list items (Issue #553)
    • Fixed a regression in the number of rendered table of contents levels in PDF and PostScript output (Issue #554)
  • version update to 1.9.22:

    • Added a "--without-http" configure option to build without CUPS HTTP/HTTPS support (Issue #547)
    • Updated HTTP/HTTPS support to work with both CUPS 2.x and 3.x.
    • Updated the maximum image dimension to prevent integer overflow on 32-bit platforms (Issue #550)
    • Updated the HTML parser to correctly report the line number of errors in files with more than 2^32-1 lines (Issue #551)
    • Fixed a crash bug with certain markdown files (Issue #548)
    • Fixed an unrestricted recursion bug when reading and formatting HTML (Issue #552)
  • version update to 1.9.21

    • Updated HTTP/HTTPS connection error reporting to include the reason.
    • Updated markdown parser.
    • Updated the HTTP/HTTPS connection timeout to 5 minutes (Issue #541)
    • Fixed a bug in the new PDF link code (Issue #536)
    • Fixed a bug in the number-up code (Issue #539)
    • Fixed a regression in leading whitespace handling (Issue #540)
    • Fixed a bug in numbered heading support (Issue #543)
    • Fixed a bug with setting the header on the first page (Issue #544)
    • Fixed paths in the HTMLDOC snap (Issue #545)
  • update to 1.9.20:

    • Fix a regression that caused spaces to disappear between some words
    • Fix resolution of relative links within a document
  • includes changes from 1.9.19:

    • Add support for ‘file’ method in links
    • Update markdown support code to mmd
    • Fix hyperlinks to subfolders
    • Fix export of UTF-8 HTML
    • Fix handling of whitespace-only nodes
    • Fix case sensitivity of link targets
References

Affected packages

openSUSE:Leap 16.0 / htmldoc

Package

Name
htmldoc
Purl
pkg:rpm/opensuse/htmldoc&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.9.23-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "htmldoc":  "1.9.23-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20219-1.json"