graphviz 2.26.3-16.1 source package in Debian

Changelog

graphviz (2.26.3-16.1) unstable; urgency=medium


  * Non-maintainer upload.
  * Add CVE-2014-1235.patch patch.
    CVE-2014-1235: buffer overflow vulnerability in yyerror() introduced by
    original fix for CVE-2014-0978. (Closes: #734745)
  * Add CVE-2014-1236.patch patch.
    CVE-2014-1236: buffer overflow from user input (the regexp in chkNum
    would accept arbitrary long digit list) (Closes: #734745)
  * Enable hardened build flags.
    Thanks to Moritz Muehlenhoff <email address hidden> (Closes: #734804)
  * Add fix-missing-format-string.patch patch.
    Fixes missing format strings for printf and fprintf calls.

 -- Salvatore Bonaccorso <email address hidden>  Sun, 12 Jan 2014 14:37:45 +0100