Graphviz: Multiple vulnerabilities — GLSA 201702-06

Multiple vulnerabilities have been found in Graphviz and the extent of these vulnerabilities are unspecified.

Affected packages

Background

Graphviz is an open source graph visualization software.

Description

Multiple vulnerabilities in Graphviz were discovered. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, able to control input matched against a regular expression or by enticing a user to process a specially crafted file, could cause unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-gfx/graphviz-2.36.0"
 

References

• CVE-2014-0978
• CVE-2014-1235
• CVE-2014-1236

Release date
February 10, 2017

Latest revision
February 10, 2017: 1

Severity
normal

Exploitable
remote

Bugzilla entries

• 497274