Security update for htmldoc (important)

An update that fixes 5 vulnerabilities is now available.

Description:

htmldoc was updated to fix issues:

• CVE-2021-40985: Fixed buffer overflow may lead to DoS via a crafted BMP
  image (bsc#1192357)
• CVE-2021-43579: Fixed stack-based buffer overflow in image_load_bmp()
  results in remote code execution if the victim converts an HTML document
  linking to a crafted BMP file (bsc#1194487)
• CVE-2022-0534: Fixed stack out-of-bounds read in gif_get_code() when
  opening a malicious GIF file results in a segmentation fault
  (bsc#1195758)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-88=1

• SUSE Package Hub for SUSE Linux Enterprise 12:

  zypper in -t patch openSUSE-2022-88=1