An update that solves one vulnerability can now be installed.. # cflow-1.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15459-1 Rating: moderate Cross-References: * CVE-2023-6031 Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the cflow-1.8-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * cflow 1.8-2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6031.html . Important patch released for cflow utility in openSUSE Tumbleweed, fixing CVE-2023-6031. Users should update promptly.. openSUSE,Tumbleweed,cflow,moderate update,CVE-2023-6031. . LinuxSecurity.com Team
Fix a use after free problem. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-e8cab459ab 2021-06-01 01:04:42.861221 --------------------------------------------------------------------------------Name : cflow Product : Fedora 33 Version : 1.6 Release : 8.fc33 URL : http://www.gnu.org/software/cflow/ Summary : Analyzes C files charting control flow within the program Description : GNU cflow analyzes a collection of C source files and prints a graph, charting control flow within the program. GNU cflow is able to produce both direct and inverted flowgraphs for C sources. Optionally a cross-reference listing can be generated. Two output formats are implemented: POSIX and GNU (extended). --------------------------------------------------------------------------------Update Information: Fix a use after free problem --------------------------------------------------------------------------------ChangeLog: * Sat May 22 2021 Terje Rosten - 1.6-8 - Fix use after free issue * Tue Jan 26 2021 Fedora Release Engineering - 1.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1962214 - CVE-2020-23856 cflow: use-after-free in call() in src/parser.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1962214 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-e8cab459ab' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Fix a use after free problem. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-6ef76430d0 2021-06-01 01:02:37.833874 --------------------------------------------------------------------------------Name : cflow Product : Fedora 34 Version : 1.6 Release : 8.fc34 URL : http://www.gnu.org/software/cflow/ Summary : Analyzes C files charting control flow within the program Description : GNU cflow analyzes a collection of C source files and prints a graph, charting control flow within the program. GNU cflow is able to produce both direct and inverted flowgraphs for C sources. Optionally a cross-reference listing can be generated. Two output formats are implemented: POSIX and GNU (extended). --------------------------------------------------------------------------------Update Information: Fix a use after free problem --------------------------------------------------------------------------------ChangeLog: * Sat May 22 2021 Terje Rosten - 1.6-8 - Fix use after free issue --------------------------------------------------------------------------------References: [ 1 ] Bug #1962214 - CVE-2020-23856 cflow: use-after-free in call() in src/parser.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1962214 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-6ef76430d0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.