Vulnerability Bulletins

DSA-3098 graphviz - security update

   
Affected software Debian
 
Joshua Rogers discovered a format string vulnerability in the yyerrorfunction in lib/cgraph/scan.l in Graphviz, a rich set of graph drawingtools. An attacker could use this flaw to cause graphviz to crash orpossibly execute arbitrary code.

More info:

https://www.debian.org/security/2014/dsa-3098