ALT Linux Team

Package tidy update in sisyphus on 2017-11-13

ALT-PU-2017-2636-1

Package tidy updated to version 5.4-alt1.20170301 for branch sisyphus in task 194482.

Closed vulnerabilities

Published: 2015-08-11
Modified: 2024-11-21

CVE-2015-5522

Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.

Severity: MEDIUM (6.8)
References:
Published: 2015-08-11
Modified: 2024-11-21

CVE-2015-5523

The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.

Severity: MEDIUM (4.3)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top