Summary
The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.
Security Fix(es):
* xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | transfig | 1:3.2.6a-5.el8_10 |
Vulnerabilities 1
-
High 7.8
Xfig: xfig: stack-overflow allows possible code execution via local input manipulation
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2362058