Bug#703467: pu: package graphviz/2.26.3-5+b1
Control: tags -1 + squeeze confirmed
On Tue, 2013-03-19 at 23:46 +0000, David Claughton wrote:
> Bug #702436 has recently been reported against graphviz, which advises
> that graphviz is being linked with an ancient shipped version of libltdl
> instead of the system version. On investigation it has become clear
> that the version being linked against is susceptible to a known security
> issue - DSA-1958-1 (CVE-2009-3736).
Assuming that the resulting package has been tested on a stable system,
please go ahead; thanks.
Regards,
Adam
Reply to: