FEDORA-EPEL-2014-0132 — security update for graphviz

stable

graphviz-2.12-10.el5

FEDORA-EPEL-2014-0132 created by jskarvad 9 years ago for Fedora EPEL 5

This is an update that fixes CVE-2014-1235 and CVE-2014-1236. This is an update that fixes overflow in yyerror.

This update has been submitted for testing by jskarvad.

9 years ago

This update is currently being pushed to the Fedora EPEL 5 testing updates repository.

9 years ago

This update has been pushed to testing

9 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

This update has been submitted for stable by jskarvad.

9 years ago

This update is currently being pushed to the Fedora EPEL 5 stable updates repository.

9 years ago

This update has been pushed to stable

9 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

graphviz-2.12-10.el5

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

BZ#1049165 CVE-2014-0978 graphviz: stack-based buffer overflow in yyerror()

BZ#1049168 graphviz: stack-based buffer overflow in yyerror() [epel-5]

BZ#1050871 CVE-2014-1235 graphviz: buffer overflow in yyerror() due to improper fix for CVE-2014-0978

BZ#1050872 CVE-2014-1236 graphviz: buffer overflow vulnerability

BZ#1050874 CVE-2014-1235 CVE-2014-1236 graphviz: various flaws [epel-5]

graphviz-2.12-10.el5

Automated Test Results

None