shield Security update for tidy

SUSE-SLE-SDK-12-2015-501

This update fixes two heap-based buffer overflows in tidy/libtidy. These vulnerabilities could allow remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. (CVE-2015-5522, CVE-2015-5523)

• Release Date
  Aug 26 2015
• References
  Bugzilla: 933588, 903962
  CVEs: CVE-2015-5523, CVE-2015-5522
• Type
  security
• Severity
  low

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12 x86_64

• Packages
  libtidy-0_99-0
  Library to Clean Up and Pretty-print HTML, XHTML or XML Markup

  1.0.20100204cvs-25.3 lock rpm

  libtidy-0_99-0-devel
  Include Files and Libraries for Development

  1.0.20100204cvs-25.3 lock rpm

  tidy
  Utility to Clean Up and Pretty-print HTML, XHTML or XML Markup

  1.0.20100204cvs-25.3 lock rpm lock src

SUSE Linux Enterprise Software Development Kit 12 ppc64le

• Packages
  libtidy-0_99-0
  Library to Clean Up and Pretty-print HTML, XHTML or XML Markup

  1.0.20100204cvs-25.3 lock rpm

  libtidy-0_99-0-devel
  Include Files and Libraries for Development

  1.0.20100204cvs-25.3 lock rpm

  tidy
  Utility to Clean Up and Pretty-print HTML, XHTML or XML Markup

  1.0.20100204cvs-25.3 lock rpm lock src

SUSE Linux Enterprise Software Development Kit 12 s390x

• Packages
  libtidy-0_99-0
  Library to Clean Up and Pretty-print HTML, XHTML or XML Markup

  1.0.20100204cvs-25.3 lock rpm

  libtidy-0_99-0-devel
  Include Files and Libraries for Development

  1.0.20100204cvs-25.3 lock rpm

  tidy
  Utility to Clean Up and Pretty-print HTML, XHTML or XML Markup

  1.0.20100204cvs-25.3 lock rpm lock src