xfig vulnerabilities (openSUSE)

2 vulnerabilities.

• xfig openSUSE Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and... CVE-2009-4227 Public exploitFix available EPSS 11.5% 6.8 MediumDecember 8, 2009
• xfig openSUSE Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack... CVE-2009-1962 Fix available 4.4 MediumJune 6, 2009