SUSE-SU-2021:1646-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2021:1646-1

CRITICAL9.8

Security update for graphviz

Published May 19, 2021

Modified 5 years ago

Fix available

Details

Description of the patch:

This update for graphviz fixes the following issues:

CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).

Affected Packages

graphviz-python

SUSE Linux Enterprise High Availability Extension 12 SP3SUSE Linux Enterprise High Availability Extension 12 SP4SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

2.28.0-29.6.1

graphviz

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5

Fixed in:

2.28.0-29.6.1

graphviz-gd

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5

Fixed in:

2.28.0-29.6.1

graphviz-gnome

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5

Fixed in:

2.28.0-29.6.1

graphviz-tcl

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5

Fixed in:

2.28.0-29.6.1

graphviz-devel

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.28.0-29.6.1

References

ADVISORY

https://bugzilla.suse.com/1185833

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-May/008793.html

ADVISORY