<div class="container">
<h1>Recommended update for python-graphviz, graphviz</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2026:21283-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-03-05T14:29:01Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise Server High Availability Extension 16.0</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that can now be installed.</p>
<h2>Description:</h2>
<p>This update for python-graphviz, graphviz fixes the following issues:</p>
<p>Changes in python-graphviz:</p>
<p>Update to 0.21:</p>
<ul>
<li>Drop Python 3.8 support (end of life 7 Oct 2024).</li>
<li>Tag Python 3.13 support.</li>
<li>Add support for <code>format='svg_inline'</code>, available since upstream
Graphviz 10.0.1. Produces header-less SVG suitable for inlining
into HTML (see https://www.graphviz.org/docs/outputs/svg/).</li>
<li>Switch project to <code>pyproject.toml</code> and build to <code>python -m build</code>)
(https://build.pypa.io). This changes the source distribution formar
from <code>.zip</code> to PEP 625 compliant <code>.tar.gz</code>
(https://peps.python.org/pep-0625/).</li>
</ul>
<p>Changes in graphviz:</p>
<p>Update to 12.2.1:</p>
<ul>
<li>
<p>Added</p>
<ul>
<li>Support for building the SWIG-generated R language bindings
has been integrated into the CMake build system. This is
controllable by the -DENABLE_R={AUTO|ON|OFF} option.</li>
<li>A sandboxing wrapper, dot_sandbox, is now included with
Graphviz. Users should prefer their platform’s native
security solutions, but if nothing better is available this
wrapper offers safe processing of untrusted inputs in some
scenarios.</li>
</ul>
</li>
<li>
<p>Changed</p>
<ul>
<li>JPEG images without an APP0 leading segment are supported for
use in src fields and friends. Previously Graphviz was overly
strict with the types of JPEGs it would recognize. #2619</li>
<li>The CMake build system now discovers and uses
pango_fc_font_lock_face if possible, for the Pango plugin to
provide more information about used fonts.</li>
</ul>
</li>
<li>
<p>Fixed</p>
<ul>
<li>The GVPR library program depath no longer acts on previously
deleted nodes, causing unpredictable results. #1702 (closed)</li>
<li>Void-typed function parameters (int foo(void bar)) and
variables void baz; in GVPR are gracefully rejected.
#2585 (closed)</li>
<li>Input that induce a set node height but no set node width no
longer crash with the failure "Assertion failed:
(r->boundary[i] <= r->boundary[NUMDIMS + i]), function
RTreeInsert". It is typically not obvious to users when their
input falls into this situation, hence why the assertion
message is quoted here. This was a regression in Graphviz
12.0.0. #2613 (closed)</li>
<li>Strings containing double quote characters preceded by escape
sequences (e.g. \n") are once again correctly escaped in dot
or canonical output. This was a regression in Graphviz 9.0.0.
#2614 (closed)</li>
<li>dot_builtins no longer lists duplicate format options in its
error messages. #2604 (closed)</li>
<li>A precision error that resulted in truncated edge lines has
been corrected. This was a regression in Graphviz 12.0.0.
#2620 (closed)</li>
<li>The xlib plugin (-Tx11) resets its initialization state
during finalization. This fixes a rare scenario where
multiple input graphs are supplied and initialization for one
of the not-first graphs fails. In this scenario, finalization
would be unaware of this failure and act on invalid state.</li>
</ul>
</li>
</ul>
<p>Update to 12.2.0:</p>
<ul>
<li>
<p>Removed</p>
<ul>
<li>Visual Studio build files have been removed. CMake is now the
only supported build system on Windows.</li>
</ul>
</li>
<li>
<p>Added</p>
<ul>
<li>Support for building the SWIG-generated PHP language bindings
has been integrated into the CMake build system. This is
controllable by the -DENABLE_PHP={AUTO|ON|OFF} option.</li>
<li>Support for building the SWIG-generated Python language
bindings has been integrated into the CMake build system.
This is controllable by the -DENABLE_PYTHON={AUTO|ON|OFF}
option.</li>
</ul>
</li>
<li>
<p>Changed</p>
<ul>
<li>An algorithm closer to that described in RFC 1942 and/or the
CSS 2.1 specification is now used for sizing table cells
within HTML-like labels. This is less scalable than the
network simplex algorithm it replaces, but in general
produces more intuitive results. #2159 (closed)</li>
<li>Tooltips on table elements within HTML-like labels are now
propagated to SVGs produced by the core plugin (-Tsvg) even
when the elements do not have href attributes. #1425 (closed)</li>
<li>In the Autotools build system, pkg-config is the only
supported way for discovering Guile. Previous use of
guile-config* has been removed. #2606 (closed)</li>
<li>The Autotools release artifacts for macOS
(Darwin_<em>_graphviz-</em>.tar.gz) now use relative paths in links
to dependent libraries and plugins. This should make the tree
relocatable instead of having to live at
/Users/gitlab/builds. #2501 (closed)</li>
<li>gml2gv no longer maps GML label attributes to Graphviz name
attributes. These are now mapped to Graphviz label
attributes. #2586 (closed)</li>
</ul>
</li>
<li>
<p>Fixed</p>
<ul>
<li>In the Autotools build system, the core plugin links against
libm, fixing some unresolvable symbols. This was a regression
in Graphviz 4.0.0. Though it would primarily have affected
non-Graphviz applications attempting to load this plugin on
Linux.</li>
<li>The osage layout engine now understands a cluster to be
indicated by the common rules, including the "cluster" prefix
being case insensitive and the cluster=true attribute as an
alternative. #2187</li>
<li>acyclic once again produces its output on stdout. This was a
regression in Graphviz 10.0.1. #2600 (closed)</li>
<li>When using the Tclpathplan module, created vgpanes can once
again be named and addressed. This was a regression in
Graphviz 12.1.2.</li>
<li>Omitting a polygon identifier when running triangulation
using the Tclpathplan module (e.g. vgpane0 triangulate
instead of vgpane0 triangulate 42) no longer goes unnoticed
and reads invalid memory. This bug seems to have existed
since the first revision of Graphviz.</li>
<li>When using the Tclpathplan module, defining a malformed
<3-point polygon and then attempting to triangulate this
polygon no longer reads invalid memory. This case is now
rejected with an error during triangulation. Like the
previous entry, this bug seems to have existed since the
first revision of Graphviz.</li>
<li>When using the Tclpathplan module, binding a pane’s
triangulation callback to a string ending in a trailing %
(e.g. vgpane0 bind triangle %) no longer causes later
out-of-bounds reads during triangulation. Like the previous
entries, this bug seems to have existed since the first
revision of Graphviz. #2596 (closed)</li>
<li>Mouse right-clicks in Smyrna are no longer sticky. In some
contexts, right-clicking the mouse would register a mouse
down event but no mouse up event, leading Smyrna to believe
the user was dragging with the right button held down.</li>
<li>Arrowhead missing from tail-end of edge #2437 (closed)</li>
<li>The Ruby bindings package (libgv-ruby) is once again
installable on Ubuntu. This became uninstallable when
Ruby 1.8 was no longer available on Ubuntu, as it had a hard
coded dependency of Ruby 1.8. This has now been relaxed to
depend on any Ruby version ≥ 1.8. #2607 (closed)</li>
<li>Generated GIFs and JPEGs display the graphed image instead
of a single solid color. This was a regression in Graphviz
12.1.1. #2609 (closed)</li>
<li>The CMake build system includes some supporting pieces of the
SWIG-generated language bindings that were previously
missing. It also links further dependencies that were
previously missing.</li>
<li>In the CMake build system, linking of the Guile language
bindings uses the full path to libguile, fixing issues on
macOS.</li>
<li>The provided release packages for Debian-based operating
systems (only Ubuntu currently) have corrected package
dependencies. #2466 (closed)</li>
<li>Discussion of gvpr -c "" in the gvpr man page has been
removed. This invocation did not do what was claimed.
#2584 (closed)</li>
<li>To see the full changelog for all intermediate releases, see:
https://gitlab.com/graphviz/graphviz/-/blob/main/CHANGELOG.md</li>
</ul>
</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise Server High Availability Extension 16.0
<br/>
<code>zypper in -t patch SUSE-SLES-HA-16.0-361=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64)
<ul>
<li>graphviz-plugins-core-debuginfo-12.2.1-160000.1.1</li>
<li>graphviz-addons-debuginfo-12.2.1-160000.1.1</li>
<li>graphviz-gd-debuginfo-12.2.1-160000.1.1</li>
<li>graphviz-12.2.1-160000.1.1</li>
<li>graphviz-gd-12.2.1-160000.1.1</li>
<li>graphviz-plugins-core-12.2.1-160000.1.1</li>
<li>graphviz-addons-debugsource-12.2.1-160000.1.1</li>
<li>graphviz-debuginfo-12.2.1-160000.1.1</li>
<li>graphviz-debugsource-12.2.1-160000.1.1</li>
</ul>
</li>
</ul>
</div>