Medium ELSA-2026-0700 1 CVE

Moderate: transfig security update (Oracle Linux 9)

Published Jan 15, 2026 · Updated Jan 15, 2026

Ecosystem: Oracle Linux

Summary

[1:3.2.7b-11]
- Detect nan in spline control values
- CVE-2025-46397

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	transfig	1:3.2.7b-11.el9_7

Vulnerabilities 1

High 7.8

CVE-2025-46397

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Alpine

Apr 23, 2025