[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#703467: pu: package graphviz/2.26.3-5+b1



Control: tags -1 + squeeze confirmed

On Tue, 2013-03-19 at 23:46 +0000, David Claughton wrote:
> Bug #702436 has recently been reported against graphviz, which advises
> that graphviz is being linked with an ancient shipped version of libltdl
> instead of the system version.  On investigation it has become clear
> that the version being linked against is susceptible to a known security
> issue - DSA-1958-1 (CVE-2009-3736).

Assuming that the resulting package has been tested on a stable system,
please go ahead; thanks.

Regards,

Adam


Reply to: