Your message dated Mon, 23 Dec 2013 18:34:08 +0000 with message-id <e1vvako-00025b...@franck.debian.org> and subject line Bug#729273: fixed in graphviz 2.26.3-16 has caused the Debian Bug report #729273, regarding graphviz: buffer overflow in dijkstra to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 729273: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729273 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: graphviz Version: 2.26.3-14 Severity: grave Tags: security Justification: user security hole dijkstra (also nop) has a buffer overflow vulnerability. A PoC file is attached. command line to reproduce: $ /usr/bin/dijkstra a < foo or $ /usr/bin/nop foo Program received signal SIGSEGV, Segmentation fault. 0x41414141 in ?? () (gdb) -- System Information: Debian Release: 7.1 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-3-686-pae (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages graphviz depends on: ii libc6 2.13-38 ii libcdt4 2.26.3-14 ii libcgraph5 2.26.3-14 ii libexpat1 2.1.0-1 ii libgd2-xpm 2.0.36~rc1~dfsg-6.1 ii libgraph4 2.26.3-14 ii libgvc5 2.26.3-14 ii libgvpr1 2.26.3-14 ii libx11-6 2:1.5.0-1+deb7u1 ii libxaw7 2:1.0.10-2 ii libxmu6 2:1.1.1-1 ii libxt6 1:1.1.3-1+deb7u1 Versions of packages graphviz recommends: ii ttf-liberation 1.07.2-6 Versions of packages graphviz suggests: pn graphviz-doc <none> ii gsfonts 1:8.11+urwcyr1.0.7~pre44-4.2 -- no debconf informationAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
--- End Message ---
--- Begin Message ---Source: graphviz Source-Version: 2.26.3-16 We believe that the bug you reported is fixed in the latest version of graphviz, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 729...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Claughton <d...@eclecticdave.com> (supplier of updated graphviz package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 23 Nov 2013 23:25:28 +0000 Source: graphviz Binary: graphviz libgv-guile libgv-lua libgv-perl libgv-php5 libgv-python libgv-ruby libgv-tcl libgraph4 libcgraph5 libcdt4 libpathplan4 libgvc5 libgvc5-plugins-gtk libgvpr1 libxdot4 libgraphviz-dev graphviz-doc graphviz-dev Architecture: source all kfreebsd-amd64 Version: 2.26.3-16 Distribution: unstable Urgency: medium Maintainer: David Claughton <d...@eclecticdave.com> Changed-By: David Claughton <d...@eclecticdave.com> Description: graphviz - rich set of graph drawing tools graphviz-dev - transitional package for graphviz-dev rename graphviz-doc - additional documentation for graphviz libcdt4 - rich set of graph drawing tools - cdt library libcgraph5 - rich set of graph drawing tools - cgraph library libgraph4 - rich set of graph drawing tools - graph library libgraphviz-dev - graphviz libs and headers against which to build applications libgv-guile - Guile bindings for graphviz libgv-lua - Lua bindings for graphviz libgv-perl - Perl bindings for graphviz libgv-php5 - PHP5 bindings for graphviz libgv-python - Python bindings for graphviz libgv-ruby - Ruby bindings for graphviz libgv-tcl - Tcl bindings for graphviz libgvc5 - rich set of graph drawing tools - gvc library libgvc5-plugins-gtk - rich set of graph drawing tools - gtk plugins libgvpr1 - rich set of graph drawing tools - gvpr library libpathplan4 - rich set of graph drawing tools - pathplan library libxdot4 - rich set of graph drawing tools - xdot library Closes: 505436 729273 Changes: graphviz (2.26.3-16) unstable; urgency=medium . * Add patch cherry-picked from upstream's github - fixes buffer overflow when processing a very long line (Closes: #729273, #505436) Checksums-Sha1: 6aaca81e81238383bb69fcaff10be52b903742b1 3264 graphviz_2.26.3-16.dsc f5e080a88451e9f31361468bf3ea8ef61fe85760 53528 graphviz_2.26.3-16.debian.tar.gz 4a9030809f70f776e8781193e12f8849d5390662 2306778 graphviz-doc_2.26.3-16_all.deb 38772b0509df76cbc416c05198d7bd655a781e07 47636 graphviz-dev_2.26.3-16_all.deb 92d52a06c8b138260b85c95643a94c6f1b3d720b 307068 graphviz_2.26.3-16_kfreebsd-amd64.deb fdb1e763bac8cd428760e9d65f0bda902dc28239 65596 libgv-guile_2.26.3-16_kfreebsd-amd64.deb 7b9913e7f2018d97144cfff72745fc9ed4f14535 74270 libgv-lua_2.26.3-16_kfreebsd-amd64.deb 95228a5fe8a8c8f365033f44983bde752265476b 80232 libgv-perl_2.26.3-16_kfreebsd-amd64.deb b9a137e8a2681f635bc9106a51f681566da7f180 70810 libgv-php5_2.26.3-16_kfreebsd-amd64.deb 7493da3bfac02f8055774b48e789d5341502cd66 74114 libgv-python_2.26.3-16_kfreebsd-amd64.deb f93b0f856c9b1a0e012d1a08591558b95d483a55 68702 libgv-ruby_2.26.3-16_kfreebsd-amd64.deb 41dd6712b41a21aa346aadc4b7df7397ae6a7137 524290 libgv-tcl_2.26.3-16_kfreebsd-amd64.deb 30e9ec7af6ac53d54965dadf4ea35c1af87e06fd 68286 libgraph4_2.26.3-16_kfreebsd-amd64.deb e4ac19eb07938de0a80cbe4cecf76fec4077b0aa 79088 libcgraph5_2.26.3-16_kfreebsd-amd64.deb 3e011c1b705577ba2b3c5bd449eabae23e1254e3 57348 libcdt4_2.26.3-16_kfreebsd-amd64.deb 6a7cad73f70857c8d673738630ad4e3536def098 61612 libpathplan4_2.26.3-16_kfreebsd-amd64.deb c075cb332815aa681e26309b751798b7ad496e88 434400 libgvc5_2.26.3-16_kfreebsd-amd64.deb 1c2372ed52681c3fb9c13856d598b9e4c5a6b527 57962 libgvc5-plugins-gtk_2.26.3-16_kfreebsd-amd64.deb 40254058d1c89b79c245944101b782eecab65693 205448 libgvpr1_2.26.3-16_kfreebsd-amd64.deb 6142c20f8c39d333b016feb91a6264ba49a7e45f 52048 libxdot4_2.26.3-16_kfreebsd-amd64.deb 4b90c30b93c00d8ccd179f425d0ad8131605aacf 97124 libgraphviz-dev_2.26.3-16_kfreebsd-amd64.deb Checksums-Sha256: 7aa2415e1eb7818fae914b3059dfc5c6adb9d2a5cd87505d286e3308473d99df 3264 graphviz_2.26.3-16.dsc 45a67d6ade25c8c6d690be36c4e483647d73972432be04cf5f44e23351d77176 53528 graphviz_2.26.3-16.debian.tar.gz 719f52438a6e08899035196ae219dd0f2eb6217fdcc11104c453f08a0de47d50 2306778 graphviz-doc_2.26.3-16_all.deb a826c78f492c35b5d658998d74157ed4527061559a2375bb013bd67fc2f43215 47636 graphviz-dev_2.26.3-16_all.deb 016ca2d0ff67eb25f53b444d5dd559448834c554ae38539285d21f77672c778b 307068 graphviz_2.26.3-16_kfreebsd-amd64.deb b42a000f6e27ac0ed419af50187638f5fc5844628f7475d502d6e414c31763f0 65596 libgv-guile_2.26.3-16_kfreebsd-amd64.deb abe85753d0009bdcf057cb578f5c32d48bc1922eee33ab0e912e6ad4d6e17ca4 74270 libgv-lua_2.26.3-16_kfreebsd-amd64.deb 5b66d81c35769b56054adcdd08d8acc4b2c48f9260a2530590e15931133ea564 80232 libgv-perl_2.26.3-16_kfreebsd-amd64.deb effe2464ffcd9129f82a7327e640f8a5a4173af55fc5eaa16c2cc8b42f13f858 70810 libgv-php5_2.26.3-16_kfreebsd-amd64.deb 70fcd5daadc23aa222e5e75509e7b7b0d54dfab1c4b51e36a83b799f391e0909 74114 libgv-python_2.26.3-16_kfreebsd-amd64.deb 748661fc33a46c063b4473e93e263b6e9e5a8aa5a1f1776d831ad15a234d4939 68702 libgv-ruby_2.26.3-16_kfreebsd-amd64.deb 5667c4e22de9148ec5496bf7af03ea73ced464c57a448ce4806866404c59cb4b 524290 libgv-tcl_2.26.3-16_kfreebsd-amd64.deb ee4e298f8de600e7cacf5ab0954d78c0b789ef2b627b1a6179b75b05253891d3 68286 libgraph4_2.26.3-16_kfreebsd-amd64.deb c48d6dc9dbd1f1a921e0513fdb65842d8d49fd6c1c99a0562f1bbe078cb9fe14 79088 libcgraph5_2.26.3-16_kfreebsd-amd64.deb d9f19f7a1347ef91c5b8bef0f4c02773f8ab204485dea43079238afa8197b7d8 57348 libcdt4_2.26.3-16_kfreebsd-amd64.deb 047547506b9fc1dcfd4131122923ffd81e8ec034e3c96101d9a343c4aa71fa6d 61612 libpathplan4_2.26.3-16_kfreebsd-amd64.deb b7d5bb0b1467031c64ed32f6a9d6e290aaa560929912845870c4b634c1b9abd1 434400 libgvc5_2.26.3-16_kfreebsd-amd64.deb 6135fdf969b7de6999c4bf2e07c68d37e5c5406e681c27bf93ebae8fc1a65873 57962 libgvc5-plugins-gtk_2.26.3-16_kfreebsd-amd64.deb 39a95262fe2d61df2c558daf9c4a61c811e9b4ddbbceeb770c9ca9de36431c2c 205448 libgvpr1_2.26.3-16_kfreebsd-amd64.deb 56ab6a138123997001113e8b20d23a6b913fed704b3468140e9d53dd35785d89 52048 libxdot4_2.26.3-16_kfreebsd-amd64.deb 54bd43c332d271ccf1b6a0ee1183366307d41ed6a10d6f9d298aa6c7d437e530 97124 libgraphviz-dev_2.26.3-16_kfreebsd-amd64.deb Files: 7f36744df17e6ec523cca555c3976cf3 3264 graphics optional graphviz_2.26.3-16.dsc 0f1cdf31c8b59c718b7805c5c387918c 53528 graphics optional graphviz_2.26.3-16.debian.tar.gz 432762cbb13a9e3bab7de079a138b29d 2306778 doc optional graphviz-doc_2.26.3-16_all.deb 0e05ca7d1a7a55a8c56d7721dc072881 47636 devel optional graphviz-dev_2.26.3-16_all.deb 70ff7e37332980de04525a65aaae1a08 307068 graphics optional graphviz_2.26.3-16_kfreebsd-amd64.deb 7f44ac8b9c0db0c0febd89e43245c000 65596 interpreters optional libgv-guile_2.26.3-16_kfreebsd-amd64.deb 8e4f7cb5165f251ecc0ef77e3647ed99 74270 interpreters optional libgv-lua_2.26.3-16_kfreebsd-amd64.deb c5cfbea933430b954740fd0960c9bc5c 80232 perl optional libgv-perl_2.26.3-16_kfreebsd-amd64.deb 9efcc292b815244dc0dedb6b75f2a5c1 70810 php optional libgv-php5_2.26.3-16_kfreebsd-amd64.deb 4e6e370849f3fa1ebac4d28187cc0f2a 74114 python optional libgv-python_2.26.3-16_kfreebsd-amd64.deb 531ef1af99d6b088756a5242f7743a00 68702 ruby optional libgv-ruby_2.26.3-16_kfreebsd-amd64.deb 5fd04718f0a645b412bfb129858f94e1 524290 interpreters optional libgv-tcl_2.26.3-16_kfreebsd-amd64.deb c73933b21904a69fb5ad620452259644 68286 libs optional libgraph4_2.26.3-16_kfreebsd-amd64.deb b4796e3fd6f4dd92b7445034221fb777 79088 libs optional libcgraph5_2.26.3-16_kfreebsd-amd64.deb 0e188bdbb450bd3b9beca0c0dc0a33b2 57348 libs optional libcdt4_2.26.3-16_kfreebsd-amd64.deb 3014d030e431743806f8d0224916c73d 61612 libs optional libpathplan4_2.26.3-16_kfreebsd-amd64.deb 8f0509d9f51af4e15bb36af25c6a553b 434400 libs optional libgvc5_2.26.3-16_kfreebsd-amd64.deb cef472b458a5665bd1e4427def8f71d6 57962 libs optional libgvc5-plugins-gtk_2.26.3-16_kfreebsd-amd64.deb 935b6a7120c6ae73cf1e4d623bc24217 205448 libs optional libgvpr1_2.26.3-16_kfreebsd-amd64.deb 188cfebf795788430baf9a81a99a79be 52048 libs optional libxdot4_2.26.3-16_kfreebsd-amd64.deb 6bd060020889d15f4753f3752300b493 97124 libdevel optional libgraphviz-dev_2.26.3-16_kfreebsd-amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/kFreeBSD) iQIcBAEBCAAGBQJSuH1IAAoJEKv/7bJACMb5tYUQAIJKG8HpAB4p1bF4KxNUXlQT +YznkCapCToHnBMrTp3DAua1ZOXz+gqgvaJOyyfdad8ryMhSFVK5v6ukimlMbIi3 OyOR8nD6FkYKYg2fIfVDyGnA1PbQlNzm4SNj0Ma+HosMr3pSYOHbAeGwtQaRIWy6 VAh2wNJcMVgvFgLxhvCz5NyZQxGO/bHPLxs56ElaCrSOd5AP0iyRl7Qfqd3i/l/i IH3XYIcshWU+wlh+q7LWRcEM2dveIEwJSKXAZfg5LuLkmkmyzcDF35CIDyhn7Xq+ GvZmDJzaz0asshHVWIil0F6j4mwc+gnz3N5jTHS0RaICk5B0ojDWc1O9P5pa33b/ P61NigCcNfQ7Dl5GkvsFpg5WUOnagEzl1Rv4LgmWD1NyKxYthgwPs29hY0IOQVJw TiBn24VS3PcOZqOaZnMKZ4DQc9bYFwjV4hf5tv+cgw7Lt2dxaXRTzKnaknYwLv1R JAi9mJt8AZslOKyJZ8P2GbPdJVwemfgAymmNyABb5UW6+nD6Cb297uxlkzVc5vqx LqJp2l75MlNDch/NNtla7jGpA0e89eyV7L1iKEET/moqz2rZ1/PkB82aZME9vZOE XctxW01onU7EUGBXGVDQjMB0lL8ZtXZmp6rVAoQrXGhG9mxSny90vE6NP22EQQCy y7zo9yu/KHDJBEmwxzdz =iqCJ -----END PGP SIGNATURE-----
--- End Message ---
