--===============1929199998096885778==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
 boundary="x+6KMIRAuhnl3hBn"
Content-Disposition: inline


--x+6KMIRAuhnl3hBn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-2435-1
December 09, 2014

graphviz vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
- Ubuntu 10.04 LTS

Summary:

graphviz could be made to crash or run programs if it opened a specially
crafted file.

Software Description:
- graphviz: rich set of graph drawing tools

Details:

It was discovered that graphviz incorrectly handled parsing errors. An
attacker could use this issue to cause graphviz to crash or possibly
execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  graphviz                        2.38.0-5ubuntu0.1

Ubuntu 14.04 LTS:
  graphviz                        2.36.0-0ubuntu3.1

Ubuntu 12.04 LTS:
  graphviz                        2.26.3-10ubuntu1.2

Ubuntu 10.04 LTS:
  graphviz                        2.20.2-8ubuntu3.2

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-2435-1
  CVE-2014-9157

Package Information:
  https://launchpad.net/ubuntu/+source/graphviz/2.38.0-5ubuntu0.1
  https://launchpad.net/ubuntu/+source/graphviz/2.36.0-0ubuntu3.1
  https://launchpad.net/ubuntu/+source/graphviz/2.26.3-10ubuntu1.2
  https://launchpad.net/ubuntu/+source/graphviz/2.20.2-8ubuntu3.2


--x+6KMIRAuhnl3hBn
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUhlnHAAoJEPMhclmdjS6XlXwH/Ar4ZE5FYQu3S/rV8gJ31HfV
W/4RsmX/4njLzAs7F31nxmnGGlGkARrFJ5JIR/MVZIhMD7hX8dxm/GtRnvFl0lgh
U08fpGCQ3qRUG+v/ap7zQvS24yzF2SqmI2PSNs+mTYhDgMv+NW7UyIz+E2A88hDX
Pb6yif5nXZV2hUopWuiarFH/GWWY1NPp+U4cmcUA1Olqqwe2eccPnW/zokg1K9ac
QRXuiuYyucAtcCEj9CvjSmm503bMZ/zbfkxhm56t8WiZvYOFUi0a9BK/Je2JPQxz
Ic5gj7mZBHoJMbuDakldDlCYc6a4BBJo3ZJF7UyWH9qyi2OuUMvALZZqm5DF7yA=
=dnKH
-----END PGP SIGNATURE-----

--x+6KMIRAuhnl3hBn--


--===============1929199998096885778==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============1929199998096885778==--