Skip to content
OpenAdvisories
Medium ALAS2-2021-1682 1 CVE

Moderate: transfig security update (Amazon Linux 2)

Published Jul 1, 2021 · Updated Jul 1, 2021

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3561: An Out of Bounds flaw was found in fig2dev utility within transfig. An attacker could use this flaw and provide a crafted input to read_objects() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability. 1955675: CVE-2021-3561 fig2dev: Global buffer overflow in fig2dev/read.c in function read_objects

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 transfig 1:3.2.8a-2.amzn2
Amazon Linux · 2 transfig-debuginfo 1:3.2.8a-2.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3561.html