tidy (20091223cvs-1.4+deb8u1) jessie-security; urgency=high * Fix heap buffer overflow and memory saturation on invalid HTML input as per CVE-2015-5522 and CVE-2015-5523 (Closes: #792571) -- Alessandro Ghedini <email address hidden> Wed, 15 Jul 2015 11:19:09 +0200