[Git][security-tracker-team/security-tracker][master] Add CVE-2023-46045/graphviz

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jan 27 06:28:09 GMT 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
95fe35bc by Salvatore Bonaccorso at 2024-01-27T07:27:35+01:00
Add CVE-2023-46045/graphviz

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,10 @@
+CVE-2023-46045 [buffer overflow via a crafted config6a file]
+	- graphviz 2.42.2-8
+	NOTE: https://gitlab.com/graphviz/graphviz/-/issues/2441
+	NOTE: Introduced by: https://gitlab.com/graphviz/graphviz/-/commit/cf95714837f06f684929b54659523c2c9b1fc19f (2.38.0)
+	NOTE: Fixed by: https://gitlab.com/graphviz/graphviz/-/commit/361f274ca901c3c476697a6404662d95f4dd43cb
+	NOTE: Fixed by: https://gitlab.com/graphviz/graphviz/-/commit/3f31704cafd7da3e86bb2861accf5e90c973e62a
+	NOTE: Fixed by: https://gitlab.com/graphviz/graphviz/-/commit/a95f977f5d809915ec4b14836d2b5b7f5e74881e
 CVE-2024-23896 (A vulnerability has been reported in Cups Easy (Purchase & Inventory), ...)
 	NOT-FOR-US: Cups Easy (Purchase & Inventory)
 CVE-2024-23894 (A vulnerability has been reported in Cups Easy (Purchase & Inventory), ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95fe35bc5dd24a132eff8eeb4d41104cdf4c6a50

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95fe35bc5dd24a132eff8eeb4d41104cdf4c6a50
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240127/c3e6f0f5/attachment.htm>


More information about the debian-security-tracker-commits mailing list