Unscored DLA-273-1 2 CVEs

tidy - security update

Published Jul 18, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	tidy	20091223cvs-1+deb6u1

Vulnerabilities 2

Unscored —

CVE-2015-5522

Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause…

tidy Ubuntu

Aug 11, 2015
Unscored —

CVE-2015-5523

The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) v…

tidy Ubuntu

Aug 11, 2015