Moderate: graphviz security update
Summary
ALSA-2021:4256: Moderate: graphviz security update. Affects graphviz versions < 2.40.1-43.el8. Fixed in 2.40.1-43.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Graphviz is open-source graph-visualization software used to represent structural information as diagrams of abstract graphs and networks. It has various applications in networking, bioinformatics, software engineering, database and web design, machine learning, and visual interfaces for technical domains.
Vulnerability Detail
The vulnerability (CVE-2020-18032) in graphviz is an off-by-one issue in the parse_reclbl() function in lib/common/shapes.c. This vulnerability could potentially lead to security breaches or unauthorized access to sensitive information. The impact and severity of the vulnerability are classified as moderate.
How To Fix
Minimum fixed version
2.40.1-43.el8
This is the first release that contains the fix.
sudo dnf update graphvizTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the graphviz package has a moderate security vulnerability (CVE-2020-18032) that can be fixed by updating to version 2.40.1-43.el8 or later. It is important to promptly apply the security update to mitigate the risk of security breaches or unauthorized access to sensitive information. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for graphviz →
FAQ
Graphviz is open-source graph-visualization software used to represent structural information as diagrams of abstract graphs and networks.
The vulnerability could potentially lead to security breaches or unauthorized access to sensitive information.
The severity of this vulnerability is classified as moderate.
To fix this vulnerability, update the graphviz package to version 2.40.1-43.el8 or later.
You can find more information about this vulnerability in the CVE page(s) listed in the References section.
References
Related vulnerabilities
Recent vulnerabilities recorded for graphviz.
