Skip to content
OpenAdvisories
Unscored DSA-3309-1 2 CVEs

tidy - security update

Published Jul 18, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 tidy 20091223cvs-1.2+deb7u1
Debian · 8 tidy 20091223cvs-1.4+deb8u1

Vulnerabilities 2

  • Unscored —

    Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause…

  • Unscored —

    The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) v…