Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Ubuntu 14.04 LTS: USN-2695-1 Moderate: HTML Tidy Denial Of Service

ubuntu
Calendar Grey July 29, 2015
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
HTML Tidy could be made to crash or run programs if it processed specially crafted data.

Summary

HTML Tidy could be made to crash or run programs if it processed specially

crafted data.

Software Description:

- tidy: HTML syntax checker and reformatter

Details:

Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a

user or automated system were tricked into processing specially crafted

data, applications linked against HTML Tidy could be made to crash, leading

to a denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service security issue code execution advisory ubuntu html tidy

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  libtidy-0.99-0                  20091223cvs-1.4ubuntu0.1

Ubuntu 14.04 LTS:
  libtidy-0.99-0                  20091223cvs-1.2ubuntu1.1

Ubuntu 12.04 LTS:
  libtidy-0.99-0                  20091223cvs-1ubuntu2.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2695-1

CVE-2015-5522, CVE-2015-5523

Severity
important
Lowest
Low
Medium
High
Critical

July 29, 2015

Topics%20covered

Topics Covered

security advisory denial of service security issue code execution advisory ubuntu html tidy

Package Information

https://launchpad.net/ubuntu/+source/tidy/20091223cvs-1.4ubuntu0.1
https://launchpad.net/ubuntu/+source/tidy/20091223cvs-1.2ubuntu1.1
https://launchpad.net/ubuntu/+source/tidy/20091223cvs-1ubuntu2.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.