Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0232-1

Опубликовано: 26 янв. 2018
Источник: suse-cvrf

Описание

Security update for transfig

This update for transfig fixes the following issues:

Security issue fixed:

  • CVE-2017-16899: Fix array index error in the fig2dev program (bsc#1069257).

Список пакетов

SUSE Linux Enterprise Server 11 SP4
transfig-3.2.5-160.3.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4
transfig-3.2.5-160.3.2

Ссылки

Описание

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:transfig-3.2.5-160.3.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4:transfig-3.2.5-160.3.2
Ссылки