-
graphviz (2.26.3-14ubuntu1.1) raring-security; urgency=low
* SECURITY UPDATE: buffer overflow in yyerror()
- debian/patches/CVE-2014-0978.patch: don't overflow buf in
lib/cgraph/scan.l.
- CVE-2014-0978
* SECURITY UPDATE: buffer overflow in yyerror() security fix
- debian/patches/CVE-2014-1235.patch: once again, don't overflow buf
in lib/cgraph/scan.l.
- CVE-2014-1235
* SECURITY UPDATE: buffer overflow in chkNum of scanner
- debian/patches/CVE-2014-1236.patch: don't overflow buf in
lib/cgraph/scan.l.
- CVE-2014-1236
-- Marc Deslauriers <email address hidden> Tue, 14 Jan 2014 13:34:59 -0500
-
graphviz (2.26.3-14ubuntu1) raring; urgency=low
* Merge with Debian; remaining changes:
- debian/patches/linkage: Add more explicit library linkage to cope with
'ld --no-copy-dt-needed-entries'.
- Build using dh_python2.
- Stop trying to install /usr/lib/graphviz/python26.
- Drop unused build-dependency on pdksh.
- Mark graphviz Multi-Arch: foreign.
- Handle multiarch Python.
- Build using guile-2.0.
- Configure with --disable-silent-rules.
* Configure for the Tcl/Tk 8.5 multiarch installation. LP: #1163136.
graphviz (2.26.3-14) unstable; urgency=low
* Use system ltdl in place of version in subdir (Closes: #702436)
- Currently an ancient version of libltdl is being
shipped and used, unnoticed until now.
Changed configure.ac to ensure system ltdl is used instead
- Security issue - affected by DSA-1958-1 (CVE-2009-3736)
graphviz (2.26.3-13) unstable; urgency=low
[ David Claughton ]
* Add 'fontfaq.txt' file to graphviz-doc package
[ Christoph Egger ]
* Import patch by Steven Chamberlain to fix hangs on kfeebsd (Closes: #701832)
-- Matthias Klose <email address hidden> Wed, 03 Apr 2013 10:02:23 +0200
-
graphviz (2.26.3-12ubuntu5) raring; urgency=low
* Build using guile-2.0.
* Configure with --disable-silent-rules.
-- Matthias Klose <email address hidden> Thu, 28 Feb 2013 09:21:16 +0100
-
graphviz (2.26.3-12ubuntu4) raring; urgency=low
* Handle multiarch Python.
-- Colin Watson <email address hidden> Mon, 07 Jan 2013 19:38:55 +0000
-
graphviz (2.26.3-12ubuntu3) raring; urgency=low
* Mark graphviz Multi-Arch: foreign.
-- Colin Watson <email address hidden> Tue, 04 Dec 2012 02:45:38 +0000
-
graphviz (2.26.3-12ubuntu2) raring; urgency=low
* Drop unused build-dependency on pdksh.
-- Colin Watson <email address hidden> Wed, 28 Nov 2012 13:40:25 +0000
-
graphviz (2.26.3-12ubuntu1) quantal; urgency=low
* Resynchronise with Debian. Remaining changes:
- debian/patches/linkage: Add more explicit library linkage to cope with
'ld --no-copy-dt-needed-entries'.
- Build using dh_python2.
- Stop trying to install /usr/lib/graphviz/python26.
graphviz (2.26.3-12) unstable; urgency=low
* Fixes to explicitly use ruby 1.8 as default for ruby is now 1.9
(Graphviz doesn't currently support ruby 1.9)
(Closes: #676098)
-- Colin Watson <email address hidden> Thu, 16 Aug 2012 19:03:00 +0100
