A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service. Reference: https://github.com/michaelrsweet/htmldoc/issues/414 Upstream patch: https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc
Created htmldoc tracking bugs for this issue: Affects: epel-7 [bug 1967021] Affects: fedora-all [bug 1967020]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
This has the same fix of 1967009 (CVE-2021-26252)