Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-19797: read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. 1786726: CVE-2019-19797 transfig: out-of-bounds write in read_colordef in read.c CVE-2019-19746: make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. 1787040: CVE-2019-19746 transfig: integer overflow leads to out-of-bounds write in make_arrow in arrow.c
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | transfig | 1:3.2.7b-2.amzn2 |
| Amazon Linux · 2 | transfig-debuginfo | 1:3.2.7b-2.amzn2 |
Vulnerabilities 2
-
Unscored —
make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer …
-
Unscored —
read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.