Most recent entries from all

ALSA-2021:4256 — Moderate: graphviz security update

Affected: AlmaLinux:8: graphviz, AlmaLinux:8: graphviz-devel, AlmaLinux:8: graphviz-doc, AlmaLinux:8: graphviz-gd, AlmaLinux:8: graphviz-python3

Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and in visual interfaces for other technical domains.

Security Fix(es):

* graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (CVE-2020-18032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-00340

Withdrawn: BELL-CVE-2020-18032 — CVE-2020-18032 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

EUVD-2026-43754

fkie_cve-2020-18032

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

GHSA-92qh-4rf3-8x2m

gsd-2020-18032

msrc_CVE-2020-18032 — Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to ex…

msrc_CVE-2020-18032

OESA-2021-1195 — graphviz security update

Affected: openEuler:20.03-LTS-SP1: graphviz

Graphviz is open source graph visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and in visual interfaces for other technical domains.

Security Fix(es): Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.(CVE-2020-18032)

openSUSE-SU-2021:0757-1 — Security update for graphviz

Security update for graphviz

SUSE-SU-2021:1646-1 — Security update for graphviz

Security update for graphviz

UBUNTU-CVE-2020-18032

Affected: Ubuntu:Pro:14.04:LTS: graphviz, Ubuntu:Pro:16.04:LTS: graphviz, Ubuntu:Pro:18.04:LTS: graphviz, Ubuntu:Pro:20.04:LTS: graphviz