Debian/tidy-html5: high 7.5
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" process
Action: Upgrade tidy-html5 to 2:5.6.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:5.6.0-3 | - |
Fixed versions
| 2:5.6.0-3 |
Sources
published · modified · JSON