ELSA-2021-4256

Опубликовано: 16 нояб. 2021

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2021-4256: graphviz security update (MODERATE)

[2.40.1-43]

Fixed races during pdf documentation build which should build docs correctly Related: CVE-2020-18032

[2.40.1-42]

Rebuilt, because pdf documentation were built incorrectly Related: CVE-2020-18032

[2.40.1-41]

Fixed buffer overflow in lib/common/shapes.c Resolves: CVE-2020-18032

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

graphviz

2.40.1-43.el8

graphviz-devel

2.40.1-43.el8

graphviz-doc

2.40.1-43.el8

graphviz-gd

2.40.1-43.el8

graphviz-python3

2.40.1-43.el8

Oracle Linux x86_64

graphviz

2.40.1-43.el8

graphviz-devel

2.40.1-43.el8

graphviz-doc

2.40.1-43.el8

graphviz-gd

2.40.1-43.el8

graphviz-python3

2.40.1-43.el8

Связанные CVE

CVE-2020-18032

Ссылки на источники

Связанные уязвимости

CVE-2020-18032

CVSS3: 7.8

ubuntu

больше 4 лет назад

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.