CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability (CVE-2021-3561).

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

• CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).
• CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).
• CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).
• CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
• CVE-2019-14275: stack-based buffer overflow in the calc_arrow function in bound.c (bsc#1143650).

This update was imported from the SUSE:SLE-15:Update update project.

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

• CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).
• CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).
• CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).
• CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
• CVE-2019-14275: stack-based buffer overflow in the calc_arrow function in bound.c (bsc#1143650).

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

• CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).
• CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).
• CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).
• CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
• CVE-2019-14275: stack-based buffer overflow in the calc_arrow function in bound.c (bsc#1143650).

This update was imported from the SUSE:SLE-15:Update update project.

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

• CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).
• CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).
• CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).
• CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
• CVE-2019-14275: stack-based buffer overflow in the calc_arrow function in bound.c (bsc#1143650).

These are all security issues fixed in the transfig-3.2.8a-5.1 package on the GA media of openSUSE Tumbleweed.

This update for transfig fixes the following issues:

• CVE-2021-3561: Fixed global buffer overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).

• CVE-2019-19797: Fixed out-of-bounds write in read_colordef in read.c (bsc#1159293).

• CVE-2019-19746: Fixed segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).

• CVE-2019-19555: Fixed stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).

• CVE-2019-14275: Fixed stack-based buffer overflow in the calc_arrow function in bound.c (bsc#1143650).

• CVE-2020-21680: Fixed a stack-based buffer overflow in the put_arrow() component in genpict2e.c (bsc#1189343).

• CVE-2020-21681: Fixed a global buffer overflow in the set_color component in genge.c (bsc#1189345).

• CVE-2020-21682: Fixed a global buffer overflow in the set_fill component in genge.c (bsc#1189346).

• CVE-2020-21683: Fixed a global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c (bsc#1189325).

• Do hardening via compile and linker flags

• Fixed last added upstream commit (boo#1136882)

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

• CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).
• CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).
• CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).
• CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).
• CVE-2019-14275: stack-based buffer overflow in the calc_arrow function in bound.c (bsc#1143650).

This update for transfig fixes the following issues:

Update to version 3.2.8, including fixes for

• CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).
• CVE-2020-21683: Fixed buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c (bsc#1189325).
• CVE-2020-21682: Fixed buffer overflow in the set_fill component in genge.c (bsc#1189346).
• CVE-2020-21681: Fixed buffer overflow in the set_color component in genge.c (bsc#1189345).
• CVE-2020-21680: Fixed stack-based buffer overflow in the put_arrow() component in genpict2e.c (bsc#1189343).
• CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).
• CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).
• CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).

Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-14275)

It was discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2019-19555, CVE-2019-19797, CVE-2020-21529, CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533, CVE-2020-21534, CVE-2020-21535, CVE-2020-21675, CVE-2020-21676, CVE-2021-3561)

It was discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-32280)