Oval Definition:oval:org.opensuse.security:def:89453
Revision Date:2021-09-16Version:1
Title:Security update for transfig (Moderate)
Description:

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

- CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329). - CVE-2020-21683: Fixed buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c (bsc#1189325). - CVE-2020-21682: Fixed buffer overflow in the set_fill component in genge.c (bsc#1189346). - CVE-2020-21681: Fixed buffer overflow in the set_color component in genge.c (bsc#1189345). - CVE-2020-21680: Fixed stack-based buffer overflow in the put_arrow() component in genpict2e.c (bsc#1189343). - CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293). - CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698). - CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
Family:unixClass:patch
Status:Reference(s):1136882
1159130
1159293
1161698
1186329
1189325
1189343
1189345
1189346
CVE-2019-19555
CVE-2019-19746
CVE-2019-19797
CVE-2020-21680
CVE-2020-21681
CVE-2020-21682
CVE-2020-21683
CVE-2021-3561
SUSE-SU-2021:3124-1
Platform(s):SUSE Linux Enterprise Server 12 SP4-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-LTSS is installed
  • AND transfig-3.2.8a-2.17.1 is installed
  • BACK