openSUSE-SU-2019:1434-1

Опубликовано: 22 мая 2019

Источник: suse-cvrf

Описание

Security update for graphviz

This update for graphviz fixes the following issues:

Security issue fixed:

CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091).

This update was imported from the SUSE:SLE-15:Update update project.

graphviz-2.40.1-lp151.6.3.1

graphviz-devel-2.40.1-lp151.6.3.1

graphviz-doc-2.40.1-lp151.6.3.1

graphviz-gd-2.40.1-lp151.6.3.1

graphviz-gnome-2.40.1-lp151.6.3.1

graphviz-guile-2.40.1-lp151.6.3.1

graphviz-gvedit-2.40.1-lp151.6.3.1

graphviz-java-2.40.1-lp151.6.3.1

graphviz-lua-2.40.1-lp151.6.3.1

graphviz-perl-2.40.1-lp151.6.3.1

graphviz-php-2.40.1-lp151.6.3.1

graphviz-plugins-core-2.40.1-lp151.6.3.1

graphviz-python-2.40.1-lp151.6.3.1

graphviz-ruby-2.40.1-lp151.6.3.1

graphviz-smyrna-2.40.1-lp151.6.3.1

graphviz-tcl-2.40.1-lp151.6.3.1

libgraphviz6-2.40.1-lp151.6.3.1

The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.

openSUSE Leap 15.1:graphviz-2.40.1-lp151.6.3.1

openSUSE Leap 15.1:graphviz-devel-2.40.1-lp151.6.3.1

openSUSE Leap 15.1:graphviz-doc-2.40.1-lp151.6.3.1

openSUSE Leap 15.1:graphviz-gd-2.40.1-lp151.6.3.1