From 8b9196e9686bad9f3424962151936970c037b61d757b3bcd3f2577072d2bb888 Mon Sep 17 00:00:00 2001 From: "Dr. Werner Fink" Date: Tue, 26 Oct 2021 12:51:26 +0000 Subject: [PATCH] Forgotten or late CVE OBS-URL: https://build.opensuse.org/package/show/Publishing/transfig?expand=0&rev=82 --- transfig.changes | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/transfig.changes b/transfig.changes index 4eddf06..26f7436 100644 --- a/transfig.changes +++ b/transfig.changes @@ -13,6 +13,15 @@ Wed Oct 6 10:45:30 UTC 2021 - Dr. Werner Fink - Remove patch 6827c09d.patch now upstream - Add patch 1b09a8.patch from upstream (for ticket #137) - Port patch fig2dev-3.2.6-fig2mpdf.patch back +- This Update includes the fixes for + * bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c. + * bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c. + * bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c. + * bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c. + * bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c. + * bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c. + * bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c. + * bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c ------------------------------------------------------------------- Mon Aug 16 07:40:07 UTC 2021 - Dr. Werner Fink