OESA-2021-1195

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1195
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1195.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2021-1195
Upstream
Published
2021-05-24T11:02:55Z
Modified
2025-08-12T05:05:33.507159Z
Summary
graphviz security update
Details

Graphviz is open source graph visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and in visual interfaces for other technical domains.

Security Fix(es):

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.(CVE-2020-18032)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / graphviz

Package

Name
graphviz
Purl
pkg:rpm/openEuler/graphviz&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.44.0-2.oe1

Ecosystem specific 

{
    "src": [
        "graphviz-2.44.0-2.oe1.src.rpm"
    ],
    "x86_64": [
        "graphviz-lua-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-java-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-debugsource-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-tcl-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-ocaml-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-python2-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-python3-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-docs-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-debuginfo-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-devel-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-ruby-2.44.0-2.oe1.x86_64.rpm",
        "graphviz-perl-2.44.0-2.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "graphviz-python2-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-debugsource-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-python3-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-docs-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-tcl-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-ocaml-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-devel-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-java-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-debuginfo-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-lua-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-perl-2.44.0-2.oe1.aarch64.rpm",
        "graphviz-ruby-2.44.0-2.oe1.aarch64.rpm"
    ]
}