-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Jan 2014 14:34:32 +0100 Source: graphviz Binary: graphviz libgv-guile libgv-lua libgv-perl libgv-php5 libgv-python libgv-ruby libgv-tcl libgraph4 libcgraph5 libcdt4 libpathplan4 libgvc5 libgvc5-plugins-gtk libgvpr1 libxdot4 libgraphviz-dev graphviz-doc graphviz-dev Architecture: source all amd64 Version: 2.26.3-14+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: David Claughton <dave@eclecticdave.com> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: graphviz - rich set of graph drawing tools graphviz-dev - transitional package for graphviz-dev rename graphviz-doc - additional documentation for graphviz libcdt4 - rich set of graph drawing tools - cdt library libcgraph5 - rich set of graph drawing tools - cgraph library libgraph4 - rich set of graph drawing tools - graph library libgraphviz-dev - graphviz libs and headers against which to build applications libgv-guile - Guile bindings for graphviz libgv-lua - Lua bindings for graphviz libgv-perl - Perl bindings for graphviz libgv-php5 - PHP5 bindings for graphviz libgv-python - Python bindings for graphviz libgv-ruby - Ruby bindings for graphviz libgv-tcl - Tcl bindings for graphviz libgvc5 - rich set of graph drawing tools - gvc library libgvc5-plugins-gtk - rich set of graph drawing tools - gtk plugins libgvpr1 - rich set of graph drawing tools - gvpr library libpathplan4 - rich set of graph drawing tools - pathplan library libxdot4 - rich set of graph drawing tools - xdot library Closes: 734745 Changes: graphviz (2.26.3-14+deb7u1) wheezy-security; urgency=high . * Non-maintainer upload by the Security Team. * Add CVE-2014-0978.patch patch. CVE-2014-0978: Fix stack-based buffer overflow due to a boundary error in the "yyerror()" function. (Closes: #734745) * Add CVE-2014-1236.patch. CVE-2014-1236: buffer overflow from user input (the regexp in chkNum would accept arbitrary long digit list) (Closes: #734745) Checksums-Sha1: 9e9e0f3d65baf59b6fc93e51e8703a46e2f70f6e 3272 graphviz_2.26.3-14+deb7u1.dsc 04503ac5a9eaa579859f0d017811fa245717edec 17092429 graphviz_2.26.3.orig.tar.gz cce094aa09d99bc42e6d81375a9e7006e91c261c 54595 graphviz_2.26.3-14+deb7u1.debian.tar.gz 4dbfdc2f1c13f5e8c57d8ca1e986c28df42a61dc 2583144 graphviz-doc_2.26.3-14+deb7u1_all.deb ee83011d540bcb70f7eb75dcdee9488a8b5804ee 49184 graphviz-dev_2.26.3-14+deb7u1_all.deb 71278ad6a660f43fee894fb721cff4178e826e20 375264 graphviz_2.26.3-14+deb7u1_amd64.deb 68160f7b01a2e908cafac54dffbcc8b8245826bc 72822 libgv-guile_2.26.3-14+deb7u1_amd64.deb e830122e61b5d31d69059a319fee1a57ce435d27 82944 libgv-lua_2.26.3-14+deb7u1_amd64.deb db8016d131c7b1c85f6cd6716ebde064547e2ee5 94858 libgv-perl_2.26.3-14+deb7u1_amd64.deb 581264e7a72d9d7a48f7442e20c1a2d631a51936 81418 libgv-php5_2.26.3-14+deb7u1_amd64.deb d1a5a7de325461d9a01e3167c92e68b26f6cc614 114296 libgv-python_2.26.3-14+deb7u1_amd64.deb 8c5ab08b86ef532324762d6d4c83adaa82eabc6f 76728 libgv-ruby_2.26.3-14+deb7u1_amd64.deb 7bb62be1e3a4dc8070b7cd12d021a8c95ec9b4a7 667470 libgv-tcl_2.26.3-14+deb7u1_amd64.deb d722675534f4f1e7429f858bbf313236c8c94add 74338 libgraph4_2.26.3-14+deb7u1_amd64.deb 363657c0d7b2fcf52ad053d2dc3cddc44b1f9c7c 88336 libcgraph5_2.26.3-14+deb7u1_amd64.deb 5948a6ba85a5866f8e4476dd1b0d147c542ccb3a 60952 libcdt4_2.26.3-14+deb7u1_amd64.deb 40a5ab83981d24e9d5206f74ba44e61551155dd7 65778 libpathplan4_2.26.3-14+deb7u1_amd64.deb 501432f9e6340441b7fb0dee005055024f009840 545166 libgvc5_2.26.3-14+deb7u1_amd64.deb bc30ee613b8a59c53435d40a8670504d541d4470 63380 libgvc5-plugins-gtk_2.26.3-14+deb7u1_amd64.deb 6946282a790d110a5a162c23dfaacd8c3bd6a042 244776 libgvpr1_2.26.3-14+deb7u1_amd64.deb 9c6e1df869e03dceea2b6331b5867f6980078876 54786 libxdot4_2.26.3-14+deb7u1_amd64.deb 0e8df50b977bfa83c42c827c659dfad78a031b47 104310 libgraphviz-dev_2.26.3-14+deb7u1_amd64.deb Checksums-Sha256: 805af6f1780320e36bd42328a8cc06ec64b1470b425dcf3325d61c4752b76f5b 3272 graphviz_2.26.3-14+deb7u1.dsc f410996e69b1095237c2128deae5fc7b6ce99055b095271abb14447bc2f37fa1 17092429 graphviz_2.26.3.orig.tar.gz d01f206e069da72fb841a3fc0aa3bc5d44dc2b909c4baee443ec96e2aebc37f4 54595 graphviz_2.26.3-14+deb7u1.debian.tar.gz 20f785e65826cbb1d837ddabf78b76ae432902f996400b6984a57caf4c7413d2 2583144 graphviz-doc_2.26.3-14+deb7u1_all.deb d2b66a41298bba51147542042678f44ef24436c01bf24deeb3092c9d90f72145 49184 graphviz-dev_2.26.3-14+deb7u1_all.deb 043f1cc77083905b19caf0aaf8d6a8c0a306f651c35fc37e1316082262765be6 375264 graphviz_2.26.3-14+deb7u1_amd64.deb 1a96462c3e168166140c3dcbca2fb2298850e4c9982d7663303e6db11e40f781 72822 libgv-guile_2.26.3-14+deb7u1_amd64.deb 00897e035afabc9db5e4b9071dd8e462ff58455fa53176fa3ea4eb011fa1afad 82944 libgv-lua_2.26.3-14+deb7u1_amd64.deb 89cccce3febca85dbe18e93a3deff76f4284e972d5cad2577cd639a93ba5e587 94858 libgv-perl_2.26.3-14+deb7u1_amd64.deb d58b5caeb12e953833c43f4afb3e67496901de788e1cd3dc724fd34651ba7085 81418 libgv-php5_2.26.3-14+deb7u1_amd64.deb 8175c545b2dcd9863401d4bf8c3615c4cc2aa26afd8e415a68f82c9437be9578 114296 libgv-python_2.26.3-14+deb7u1_amd64.deb 277d6407c3e38ff51d627bcfbf5cb407235cd7f8d4cf9106595819f3cb6c7b4c 76728 libgv-ruby_2.26.3-14+deb7u1_amd64.deb 91bab6bef909c70ed3f7751265ed26ea08d4b0261555f8ea3cd087ac0582e6d5 667470 libgv-tcl_2.26.3-14+deb7u1_amd64.deb 909ed28f82533315a3e27b35d0303e135fa5b6a0ff273878721d0fb54d71402f 74338 libgraph4_2.26.3-14+deb7u1_amd64.deb f87a7a76e8df0720828289859758928397bec9611160ecb44f1414803252cb20 88336 libcgraph5_2.26.3-14+deb7u1_amd64.deb 6dd14d4d153cbab3ca9b92384d9d2a49f58bd81413ecc10ddc9d55fcf0564f08 60952 libcdt4_2.26.3-14+deb7u1_amd64.deb 4828aff730e13ff7893ceeb4a04523d15495a0f1046528108545bd09e2acf456 65778 libpathplan4_2.26.3-14+deb7u1_amd64.deb df0a9075dabbdc97fc24906302f89fd8bd30181e52c050b1168b183af99579f5 545166 libgvc5_2.26.3-14+deb7u1_amd64.deb 31aa851048f52861a05ce191a7b05c129bcf6135d4248569200fe8cdc63b8c44 63380 libgvc5-plugins-gtk_2.26.3-14+deb7u1_amd64.deb cdefdce5a7574efa8b9860a4eccd71e5133cf5741fd96a85d80e44c491914854 244776 libgvpr1_2.26.3-14+deb7u1_amd64.deb 4d63946b6e4765289c855841575f7ba01f1d5fcb129d2312c9167397ced76f1d 54786 libxdot4_2.26.3-14+deb7u1_amd64.deb 81442133798678229d74f4190ed1db3fe1d19bb02a2db12726ab7f4d8d2b3bd4 104310 libgraphviz-dev_2.26.3-14+deb7u1_amd64.deb Files: be44f4a4a878cec2be047452287003bd 3272 graphics optional graphviz_2.26.3-14+deb7u1.dsc 6f45946fa622770c45609778c0a982ee 17092429 graphics optional graphviz_2.26.3.orig.tar.gz 4d90f279e8f14ad37ace9322e07ade5d 54595 graphics optional graphviz_2.26.3-14+deb7u1.debian.tar.gz bc58d0ed56b8ead1832c7e327d11b7fe 2583144 doc optional graphviz-doc_2.26.3-14+deb7u1_all.deb cbabe5270d90dd97be47097446d0bfbb 49184 devel optional graphviz-dev_2.26.3-14+deb7u1_all.deb b9b75b9ef2797c11605ed5ae6073fce6 375264 graphics optional graphviz_2.26.3-14+deb7u1_amd64.deb 3248ffe5d1482cb89e21749e85cb9288 72822 interpreters optional libgv-guile_2.26.3-14+deb7u1_amd64.deb 23372e18bdb1e38c20b5d4254fc7a213 82944 interpreters optional libgv-lua_2.26.3-14+deb7u1_amd64.deb 8071c9d1dcbea365a53be1b714747819 94858 perl optional libgv-perl_2.26.3-14+deb7u1_amd64.deb 9187042fb03b454ade33113c6e7eba43 81418 php optional libgv-php5_2.26.3-14+deb7u1_amd64.deb fba09ffc4d41df915899f4229366dc5a 114296 python optional libgv-python_2.26.3-14+deb7u1_amd64.deb 9d4639ff07c3ca7d9abadd24c5aebb82 76728 ruby optional libgv-ruby_2.26.3-14+deb7u1_amd64.deb c925c032c6ebeccabf9094cd22eb0e0b 667470 interpreters optional libgv-tcl_2.26.3-14+deb7u1_amd64.deb 262d32fa6bbc651fde71b7d17f513ec9 74338 libs optional libgraph4_2.26.3-14+deb7u1_amd64.deb 7a8055e3e94b0f1c55cf11511ec72644 88336 libs optional libcgraph5_2.26.3-14+deb7u1_amd64.deb fd3a1e51c73ac74a896e705ef9ce0e3a 60952 libs optional libcdt4_2.26.3-14+deb7u1_amd64.deb a27e7bc905a81b4557a065728fe40e97 65778 libs optional libpathplan4_2.26.3-14+deb7u1_amd64.deb a15254d529803454d274bc03f16c2183 545166 libs optional libgvc5_2.26.3-14+deb7u1_amd64.deb c851c4674b1f3eb14e9d3cb0c3b6d60d 63380 libs optional libgvc5-plugins-gtk_2.26.3-14+deb7u1_amd64.deb 4c658c5a9aca2d366ca899b900d0ec81 244776 libs optional libgvpr1_2.26.3-14+deb7u1_amd64.deb 93c3e2242f96dc46d303fe5d75e7485c 54786 libs optional libxdot4_2.26.3-14+deb7u1_amd64.deb c2daa0de22a20119440710786d32c307 104310 libdevel optional libgraphviz-dev_2.26.3-14+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJS0UxvAAoJEAVMuPMTQ89ENxUP/25vJep7sYRxcE+ufw8k6TcP owzW39i83/0lXyUFDDGhWvxyEP/YSR7hDVtuIHi6iGwCcxjX6m08zCdDWMd4Z2t8 +X8fqnYpuVJiqXO/9R3h4xWzKBPVRZvTvrWQpDrCm4q2a6y3xW2EAFLewsXwa7wB fvRsxh8b4RNgzkXxj1eJA3bA9HKqKMrqg345CMd7inSKU80IWv1aQOua3I/peNWH tj/xzCnFbWkwSDaS6mGuw2VhXdGnSf3AlyrUkqYJFQAfnGPGhP9CorpqfgifiPLw quyrcdhw/nlkOoSrb3I0dn54jEY1xZhyxA5GIcTcblcWvycKDmwgbslmOXgg3N+d ShssSncJeNbVY70tLQQepwu211Li73mHi3mPnb9dKZcQUgEBsjDlcdOmAv6jCpW2 S+/fNgId723c1ttEWTUTuij4ZKdMZuP/IbE3kTPDLZNg8dPQDkHa7jo/qgMjacoh tnUqkPTimNsU6oWkcYxXuZf//7/fJ107Bcm5TR5T4fh14s7FzVtKozLjfWc13uuB OiZ6ZtZKUdRUeXGEXXllSH53zitwAvsJXbB/r2cuP+K5zeJ5QQGViUuNyLyOsLcl T7yMrYD6o9MYjr1fvL2pk7Q8spyeLE6XZ5T7AqnxoDRQGYvz6AL+Re/SLbp9I2MD VmwFXhtvkWFfE6PY4HGo =icCe -----END PGP SIGNATURE-----
