Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0757-1

Опубликовано: 22 мая 2021
Источник: suse-cvrf

Описание

Security update for graphviz

This update for graphviz fixes the following issues:

  • CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
graphviz-2.40.1-lp152.7.10.1
graphviz-devel-2.40.1-lp152.7.10.1
graphviz-doc-2.40.1-lp152.7.10.1
graphviz-gd-2.40.1-lp152.7.10.1
graphviz-gnome-2.40.1-lp152.7.10.1
graphviz-guile-2.40.1-lp152.7.10.1
graphviz-gvedit-2.40.1-lp152.7.10.1
graphviz-java-2.40.1-lp152.7.10.1
graphviz-lua-2.40.1-lp152.7.10.1
graphviz-perl-2.40.1-lp152.7.10.1
graphviz-php-2.40.1-lp152.7.10.1
graphviz-plugins-core-2.40.1-lp152.7.10.1
graphviz-python-2.40.1-lp152.7.10.1
graphviz-ruby-2.40.1-lp152.7.10.1
graphviz-smyrna-2.40.1-lp152.7.10.1
graphviz-tcl-2.40.1-lp152.7.10.1
libgraphviz6-2.40.1-lp152.7.10.1

Ссылки

Описание

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

Затронутые продукты
openSUSE Leap 15.2:graphviz-2.40.1-lp152.7.10.1
openSUSE Leap 15.2:graphviz-devel-2.40.1-lp152.7.10.1
openSUSE Leap 15.2:graphviz-doc-2.40.1-lp152.7.10.1
openSUSE Leap 15.2:graphviz-gd-2.40.1-lp152.7.10.1
Ссылки
Уязвимость openSUSE-SU-2021:0757-1