Advisories » MGASA-2018-0307

Updated graphviz packages fix security vulnerability

Publication date: 11 Jul 2018
Modification date: 11 Jul 2018
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2018-10196

Description

NULL pointer dereference vulnerability in the rebuild_vlists function in
lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote
attackers to cause a denial of service (application crash) via a crafted
file. (CVE-2018-10196)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23133
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TWUEEJPMS5LAROYJYY6FREOTI6VPN3M4/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10196

SRPMS

5/core

• graphviz-2.38.0-10.1.mga5

6/core

• graphviz-2.38.0-20.1.mga6