* Thu Feb 15 2024 pgajdosAATTsuse.com- version update to 1.9.18 * Fixed table rendering when there are missing `
` (Issue #494) * Fixed support for links of the form \"filename.html#anchor\" in PDF output (Issue #514) * Fixed `--header1` support for web page output (Issue #515) * Fixed markdown emphasized, strong, and struck-through text (Issue 517) * Mon Oct 02 2023 pgajdosAATTsuse.com- version update to 1.9.17 * Added new `--pre-indent` option to control indentation of pre-formatted text (Issue #505) * Now link to CUPS library instead of embedding its HTTP code. * Updated PostScript and PDF date/time information to use UTC (Issue #490) * Fixed multiple conversions of UTF-8 HTML files from the GUI (Issue #496) * Fixed a compile bug on Solaris (Issue #498) * Fixed a markdown parsing bug (Issue #503) * Fixed a relative URL handling bug (Issue #507) * Fixed a crash bug with bad title images (Issue #510) * Fixed some minor CodeQL warnings. * Mon Jul 11 2022 Dirk Müller - update to 1.9.16: * Added support for $DATE(format) and $TIME(format) header/footer strings * (Issue #472) * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch) * Fixed potential heap overflow bugs with pages (CVE-2022-28085) * Fixed potential use-after-free in blocks (Issue #484) * Updated the GNU TLS HTTPS support code to use a faster connection shutdown * mode (Issue #487) * Fixed some minor Coverity warnings.- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream) * Wed May 11 2022 pgajdosAATTsuse.com- security update- added patches fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow + htmldoc-CVE-2022-27114.patch * Fri Apr 29 2022 pgajdosAATTsuse.com- security update- added patches fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx + htmldoc-CVE-2022-28085.patch * Thu Feb 10 2022 pgajdosAATTsuse.com- version update to 1.9.15 * Fixed a potential heap overflow bug with GIF images (Issue #461) * Fixed a potential double-free bug with PNG images (Issue #462) * Fixed a potential stack overflow bug with GIF images (Issue #463) * Fixed a potential heap underflow bug with empty attributes (Issue #464) * Fixed a potential stack overflow bug with BMP images (Issue #466) * Fixed a potential heap overflow bug with the table-of-contents (Issue #467) * Fixed a potential heap overflow bug with headings (Issue #468) * Fixed a potential stack overflow bug with GIF images (Issue #470) * Wed Jan 12 2022 Danilo Spinella - Update to version 1.9.14: * BMP image support is now deprecated and will be removed in a future release of HTMLDOC. * Fixed a potential stack overflow bug with GIF images. * Fixed the PDF creation date (Issue #455) * Fixed a potential stack overflow bug with BMP images (Issue #456) * Fixed a compile issue when libpng was not available (Issue #458)- Update to version 1.9.13: * Now install a 32x32 icon for Linux (Issue #432) * Fixed an issue with large values for roman numerals and letters in headings (Issue #433) * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439) * Fixed a crash bug with bogus BMP images (Issue #444) * Fixed a potential heap overflow bug with bogus GIF images (Issue #451) * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. (CVE-2021-43579, bsc#1194487)- Remove upstreamed patch htmldoc-CVE-2021-40985.patch * Fri Nov 05 2021 pgajdosAATTsuse.com- security update- added patches fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image + htmldoc-CVE-2021-40985.patch * Tue Jun 01 2021 Ferdinand Thiessen - Update to version 1.9.12 * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 ) * Fixed a crash bug with \"data:\" URIs and EPUB output * Fixed several other crash bugs * Fixed JPEG error handling * Fixed some minor issues * Removed the bundled libjpeg, libpng, and zlib. * Fri Jan 29 2021 Dirk Müller - update to 1.9.11: - Added high-resolution desktop icons for Linux. - Updated the internal HTTP library to fix truncation of redirection URLs - Fixed a regression in the handling of character entities for UTF-8 input - The `--numbered` option did not work when the table-of-contents was disabled - Updated local zlib to v1.2.11. - Updated local libpng to v1.6.37. - Fixed packaging issues on macOS and Windows - Now ignore sRGB profile errors in PNG files - The GUI would crash when saving - Page comments are now allowed in `pre` text
