FEDORA-2020-5d0f0593ae — security update for transfig and xfig

stable

transfig-3.2.7b-1.fc31 and xfig-3.2.7b-1.fc31

FEDORA-2020-5d0f0593ae created by jwrdegoede 5 years ago for Fedora 31

Security fix for CVE-2019-19746, CVE-2019-19797
New upstream release 3.2.7b
Add patch fixing CVE-2019-19746 (#1787040)
Add patch fixing CVE-2019-19797 (#1786726)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-5d0f0593ae

This update has been submitted for testing by jwrdegoede.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

transfig-3.2.7b-1.fc31

xfig-3.2.7b-1.fc31

BZ#1786726 CVE-2019-19797 transfig: out-of-bounds write in read_colordef in read.c

BZ#1786727 CVE-2019-19797 transfig: out-of-bounds write in read_colordef in read.c [fedora-all]

BZ#1787040 CVE-2019-19746 transfig: integer overflow leads to out-of-bounds write in make_arrow in arrow.c

BZ#1787041 CVE-2019-19746 transfig: integer overflow leads to out-of-bounds write in make_arrow in arrow.c [fedora-all]

transfig-3.2.7b-1.fc31

xfig-3.2.7b-1.fc31

Automated Test Results

ignored