Security update for transfig SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1806-1 Final 1 1 2020-06-30T15:43:39Z current 2020-06-30T15:43:39Z 2020-06-30T15:43:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for transfig This update for transfig fixes the following issues: Security issue fixed: - CVE-2019-14275: Fixed stack-based buffer overflow in the calc_arrow function (bsc#1143650). - CVE-2018-16140: Fixed a buffer underwrite vulnerability in get_line() in read.c, which allowed an attacker to write prior to the beginning of the buffer via specially crafted .fig file (bsc#1106531) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-1806,SUSE-SLE-SERVER-12-SP4-2020-1806,SUSE-SLE-SERVER-12-SP5-2020-1806 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201806-1/ Link for SUSE-SU-2020:1806-1 https://lists.suse.com/pipermail/sle-security-updates/2020-June/007058.html E-Mail link for SUSE-SU-2020:1806-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1106531 SUSE Bug 1106531 https://bugzilla.suse.com/1143650 SUSE Bug 1143650 https://www.suse.com/security/cve/CVE-2018-16140/ SUSE CVE CVE-2018-16140 page https://www.suse.com/security/cve/CVE-2019-14275/ SUSE CVE CVE-2019-14275 page SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 transfig-3.2.5e-2.8.2 transfig-3.2.5e-2.8.2 as a component of SUSE Linux Enterprise Server 12 SP4 transfig-3.2.5e-2.8.2 as a component of SUSE Linux Enterprise Server 12 SP5 transfig-3.2.5e-2.8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 transfig-3.2.5e-2.8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file. CVE-2018-16140 SUSE Linux Enterprise Server 12 SP4:transfig-3.2.5e-2.8.2 SUSE Linux Enterprise Server 12 SP5:transfig-3.2.5e-2.8.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:transfig-3.2.5e-2.8.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:transfig-3.2.5e-2.8.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201806-1/ https://www.suse.com/security/cve/CVE-2018-16140.html CVE-2018-16140 https://bugzilla.suse.com/1106531 SUSE Bug 1106531 Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. CVE-2019-14275 SUSE Linux Enterprise Server 12 SP4:transfig-3.2.5e-2.8.2 SUSE Linux Enterprise Server 12 SP5:transfig-3.2.5e-2.8.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:transfig-3.2.5e-2.8.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:transfig-3.2.5e-2.8.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201806-1/ https://www.suse.com/security/cve/CVE-2019-14275.html CVE-2019-14275 https://bugzilla.suse.com/1143650 SUSE Bug 1143650