Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:1303-1

Опубликовано: 30 авг. 2020
Источник: suse-cvrf

Описание

Security update for graphviz

This update for graphviz fixes the following issues:

  • CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
graphviz-2.40.1-lp152.7.7.1
graphviz-devel-2.40.1-lp152.7.7.1
graphviz-doc-2.40.1-lp152.7.7.1
graphviz-gd-2.40.1-lp152.7.7.1
graphviz-gnome-2.40.1-lp152.7.7.1
graphviz-guile-2.40.1-lp152.7.7.1
graphviz-gvedit-2.40.1-lp152.7.7.1
graphviz-java-2.40.1-lp152.7.7.1
graphviz-lua-2.40.1-lp152.7.7.1
graphviz-perl-2.40.1-lp152.7.7.1
graphviz-php-2.40.1-lp152.7.7.1
graphviz-plugins-core-2.40.1-lp152.7.7.1
graphviz-python-2.40.1-lp152.7.7.1
graphviz-ruby-2.40.1-lp152.7.7.1
graphviz-smyrna-2.40.1-lp152.7.7.1
graphviz-tcl-2.40.1-lp152.7.7.1
libgraphviz6-2.40.1-lp152.7.7.1

Ссылки

Описание

NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Затронутые продукты
openSUSE Leap 15.2:graphviz-2.40.1-lp152.7.7.1
openSUSE Leap 15.2:graphviz-devel-2.40.1-lp152.7.7.1
openSUSE Leap 15.2:graphviz-doc-2.40.1-lp152.7.7.1
openSUSE Leap 15.2:graphviz-gd-2.40.1-lp152.7.7.1
Ссылки
Уязвимость openSUSE-SU-2020:1303-1