TITLE:
Ubuntu update for graphviz

SECUNIA ADVISORY ID:
SA17207

VERIFY ADVISORY:
http://secunia.com/advisories/17207/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Ubuntu Linux 5.04
http://secunia.com/product/5036/

DESCRIPTION:
Ubuntu has issued an update for graphviz. This fixes a vulnerability,
which can be exploited by malicious, local users to perform certain
actions on a vulnerable system with escalated privileges.

For more information:
SA17121

SOLUTION:
Apply updated packages.

-- Ubuntu 5.04 (Hoary Hedgehog) --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/g/graphviz/graphviz_2.2-1ubuntu0.1.diff.gz
Size/MD5: 207632 5e836a324f059215f8d0daaa9d469107
http://security.ubuntu.com/ubuntu/pool/main/g/graphviz/graphviz_2.2-1ubuntu0.1.dsc
Size/MD5: 788 7c934df6c6a84e937a7060d9743d1c29
http://security.ubuntu.com/ubuntu/pool/main/g/graphviz/graphviz_2.2.orig.tar.gz
Size/MD5: 4379295 9275d30695a5c22f360acbef7b85acd3

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/universe/g/graphviz/graphviz-dev_2.2-1ubuntu0.1_amd64.deb
Size/MD5: 147494 2b23526fde607848990ee8b931ea9e0e
http://security.ubuntu.com/ubuntu/pool/universe/g/graphviz/graphviz-doc_2.2-1ubuntu0.1_amd64.deb
Size/MD5: 1079078 846c09a610e9c7533c34be24ffd35524
http://security.ubuntu.com/ubuntu/pool/main/g/graphviz/graphviz_2.2-1ubuntu0.1_amd64.deb
Size/MD5: 1026506 9f08f1dba4f6e94320600d5c4d043d83

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/universe/g/graphviz/graphviz-dev_2.2-1ubuntu0.1_i386.deb
Size/MD5: 147500 beb9f9a7863864a0da2c829eb4688793
http://security.ubuntu.com/ubuntu/pool/universe/g/graphviz/graphviz-doc_2.2-1ubuntu0.1_i386.deb
Size/MD5: 1079084 58c7bd99908e4d61e946dd82b7000f12
http://security.ubuntu.com/ubuntu/pool/main/g/graphviz/graphviz_2.2-1ubuntu0.1_i386.deb
Size/MD5: 947778 7e0fe2c149954e64cc6fdceaa5ae5bec

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/universe/g/graphviz/graphviz-dev_2.2-1ubuntu0.1_powerpc.deb
Size/MD5: 147508 2c786f652e59e9379e120d7065b5bca5
http://security.ubuntu.com/ubuntu/pool/universe/g/graphviz/graphviz-doc_2.2-1ubuntu0.1_powerpc.deb
Size/MD5: 1079120 e20fb8adb1c98c784dd5016fda1df8d3
http://security.ubuntu.com/ubuntu/pool/main/g/graphviz/graphviz_2.2-1ubuntu0.1_powerpc.deb
Size/MD5: 1075524 2d189fbb333fe89d00dd48a16dc27fc1

ORIGINAL ADVISORY:
http://www.ubuntu.com/usn/usn-208-1

OTHER REFERENCES:
SA17121:
http://secunia.com/advisories/17121/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------