Amazon Linux 1 Security Advisory: ALAS-2014-285
Advisory Release Date: 2014-02-03 15:27 Pacific
Advisory Updated Date: 2014-09-16 22:21 Pacific
Severity:
Medium
Issue Overview:
Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.
Affected Packages:
graphviz-php
Issue Correction:
Run yum update graphviz-php to update your system.
New Packages:
i686:
graphviz-php-2.30.1-6.30.amzn1.i686
src:
graphviz-php-2.30.1-6.30.amzn1.src
x86_64:
graphviz-php-2.30.1-6.30.amzn1.x86_64