| Revision Date: | 2021-09-16 | Version: | 1 |
| Title: | Security update for transfig (Moderate) |
| Description: |
This update for transfig fixes the following issues:
Update to version 3.2.8, including fixes for
- CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329). - CVE-2020-21683: Fixed buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c (bsc#1189325). - CVE-2020-21682: Fixed buffer overflow in the set_fill component in genge.c (bsc#1189346). - CVE-2020-21681: Fixed buffer overflow in the set_color component in genge.c (bsc#1189345). - CVE-2020-21680: Fixed stack-based buffer overflow in the put_arrow() component in genpict2e.c (bsc#1189343). - CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293). - CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698). - CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1136882
1159130
1159293
1161698
1186329
1189325
1189343
1189345
1189346
CVE-2019-19555
CVE-2019-19746
CVE-2019-19797
CVE-2020-21680
CVE-2020-21681
CVE-2020-21682
CVE-2020-21683
CVE-2021-3561
|
| Platform(s): | SUSE Linux Enterprise Server 12 SP3-ESPOS
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND transfig-3.2.8a-2.17.1 is installed
|