Security update for htmldoc (moderate)

An update that solves four vulnerabilities and has two
fixes is now available.

Description:

htmldoc was updated to fix issues:

• CVE-2021-40985: Fixed buffer overflow may lead to DoS via a crafted BMP
  image (bsc#1192357)
• CVE-2021-43579: Fixed stack-based buffer overflow in image_load_bmp()
  results in remote code execution if the victim converts an HTML document
  linking to a crafted BMP file (bsc#1194487)
• CVE-2022-0534: Fixed stack out-of-bounds read in gif_get_code() when
  opening a malicious GIF file results in a segmentation fault
  (bsc#1195758)

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-43=1

• openSUSE Backports SLE-15-SP3:

  zypper in -t patch openSUSE-2022-43=1