Ubuntu 14.10 USN-2435-1 Moderate: Risk of Crash in Graphviz Tool

ubuntu

December 9, 2014

graphviz could be made to crash or run programs if it opened a speciallycrafted file.

Summary

graphviz could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- graphviz: rich set of graph drawing tools

Details:

It was discovered that graphviz incorrectly handled parsing errors. An

attacker could use this issue to cause graphviz to crash or possibly

execute arbitrary code.

Topics Covered

security advisory moderate software update Ubuntu arbitrary code graphviz program crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  graphviz                        2.38.0-5ubuntu0.1

Ubuntu 14.04 LTS:
  graphviz                        2.36.0-0ubuntu3.1

Ubuntu 12.04 LTS:
  graphviz                        2.26.3-10ubuntu1.2

Ubuntu 10.04 LTS:
  graphviz                        2.20.2-8ubuntu3.2

In general, a standard system update will make all the necessary changes.