shield Security update for transfig

SUSE-SLE-SAP-12-SP4-2021-3124

This update for transfig fixes the following issues: Update to version 3.2.8, including fixes for - CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329). - CVE-2020-21683: Fixed buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c (bsc#1189325). - CVE-2020-21682: Fixed buffer overflow in the set_fill component in genge.c (bsc#1189346). - CVE-2020-21681: Fixed buffer overflow in the set_color component in genge.c (bsc#1189345). - CVE-2020-21680: Fixed stack-based buffer overflow in the put_arrow() component in genpict2e.c (bsc#1189343). - CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293). - CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698). - CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).

• Release Date
  Sep 16 2021
• References
  Bugzilla: 1159130, 1161698, 1136882, 1186329, 1159293, 1189325, 1189346, 1189345, 1189343
  CVEs: CVE-2019-19746, CVE-2019-19797, CVE-2019-19555, CVE-2020-21680, CVE-2020-21681, CVE-2020-21682, CVE-2020-21683, CVE-2021-3561
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  transfig
  Graphic Converter

  3.2.8a-2.17.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  transfig
  Graphic Converter

  3.2.8a-2.17.1 lock rpm lock src