Medium ELSA-2026-0756 1 CVE

Moderate: transfig security update (Oracle Linux 8)

Published Jan 19, 2026 · Updated Jan 19, 2026

Ecosystem: Oracle Linux

Summary

[1:3.2.6a-5]
- Detect nan in spline control values
- Fix for CVE-2025-46397

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	transfig	1:3.2.6a-5.el8_10

Vulnerabilities 1

High 7.8

CVE-2025-46397

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Alpine

Apr 23, 2025