tidy-html5 could be made to crash or run programs if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-6483-1 November 15, 2023 tidy-html5 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: tidy-html5 could be made to crash or run programs if it opened a specially crafted file. Software Description: - tidy-html5: HTML/XML syntax checker and reformatter Details: Neeraj Pal discovered that HTML Tidy incorrectly handled parsing certain HTML data. If a user or automated system were tricked into parsing specially crafted HTML data, a remote attacker could cause HTML Tidy to consume resources, leading to a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: libtidy5deb1 2:5.6.0-11ubuntu0.23.10.1 tidy 2:5.6.0-11ubuntu0.23.10.1 Ubuntu 23.04: libtidy5deb1 2:5.6.0-11ubuntu0.23.04.1 tidy 2:5.6.0-11ubuntu0.23.04.1 Ubuntu 22.04 LTS: libtidy5deb1 2:5.6.0-11ubuntu0.22.04.1 tidy 2:5.6.0-11ubuntu0.22.04.1 Ubuntu 20.04 LTS: libtidy5deb1 2:5.6.0-11ubuntu0.20.04.1 tidy 2:5.6.0-11ubuntu0.20.04.1 In general, a standard system update will make all the necessary changes. References: CVE-2021-33391 Package Information: https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.10.1 https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.04.1 https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.20.04.1 . Secure your Ubuntu system by updating to the latest packages that fix the HTML Tidy vulnerability, which can cause crashes and remote code execution risks. Ubuntu Update, HTML Tidy Issue, Security Notice, Remote Execution. . Severity: Critical. LinuxSecurity.com Team
HTML Tidy could be made to crash or run programs if it processed specially crafted data.. =========================================================================Ubuntu Security Notice USN-2695-1 July 29, 2015 tidy vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.04 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: HTML Tidy could be made to crash or run programs if it processed specially crafted data. Software Description: - tidy: HTML syntax checker and reformatter Details: Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.04: libtidy-0.99-0 20091223cvs-1.4ubuntu0.1 Ubuntu 14.04 LTS: libtidy-0.99-0 20091223cvs-1.2ubuntu1.1 Ubuntu 12.04 LTS: libtidy-0.99-0 20091223cvs-1ubuntu2.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2695-1 CVE-2015-5522, CVE-2015-5523 Package Information: https://launchpad.net/ubuntu/+source/tidy/20091223cvs-1.4ubuntu0.1 https://launchpad.net/ubuntu/+source/tidy/20091223cvs-1.2ubuntu1.1 https://launchpad.net/ubuntu/+source/tidy/20091223cvs-1ubuntu2.1 . The HTML Tidy software in Ubuntu has potential security flaws that could lead to system errors or unauthorized code execution stemming from improper memory management.. HTML Tidy, Code Execution, Denial Of Service, Ubuntu Security. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.