Bug#703467: pu: package graphviz/2.26.3-5+b1
Control: tags -1 + pending
On Wed, 2013-03-20 at 20:00 +0000, Adam D. Barratt wrote:
> On Tue, 2013-03-19 at 23:46 +0000, David Claughton wrote:
> > Bug #702436 has recently been reported against graphviz, which advises
> > that graphviz is being linked with an ancient shipped version of libltdl
> > instead of the system version. On investigation it has become clear
> > that the version being linked against is susceptible to a known security
> > issue - DSA-1958-1 (CVE-2009-3736).
>
> Assuming that the resulting package has been tested on a stable system,
> please go ahead; thanks.
Uploaded and flagged for acceptance in to p-u; thanks.
Regards,
Adam
Reply to: