{"id":"SUSE-SU-2021:3124-1","summary":"Security update for transfig","details":"This update for transfig fixes the following issues:\n\nUpdate to version 3.2.8, including fixes for\n\n- CVE-2021-3561: overflow in fig2dev/read.c in function read_colordef() (bsc#1186329).\n- CVE-2020-21683: Fixed buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c (bsc#1189325).\n- CVE-2020-21682: Fixed buffer overflow in the set_fill component in genge.c (bsc#1189346).\n- CVE-2020-21681: Fixed buffer overflow in the set_color component in genge.c (bsc#1189345).\n- CVE-2020-21680: Fixed stack-based buffer overflow in the put_arrow() component in genpict2e.c (bsc#1189343).\n- CVE-2019-19797: out-of-bounds write in read_colordef in read.c (bsc#1159293).\n- CVE-2019-19555: stack-based buffer overflow because of an incorrect sscanf (bsc#1161698).\n- CVE-2019-19746: segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type (bsc#1159130).\n","modified":"2026-03-11T07:18:05.452743Z","published":"2021-09-16T17:46:46Z","related":["CVE-2019-19555","CVE-2019-19746","CVE-2019-19797","CVE-2020-21680","CVE-2020-21681","CVE-2020-21682","CVE-2020-21683","CVE-2021-3561"],"upstream":["CVE-2019-19555","CVE-2019-19746","CVE-2019-19797","CVE-2020-21680","CVE-2020-21681","CVE-2020-21682","CVE-2020-21683","CVE-2021-3561"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213124-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1136882"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159130"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159293"},{"type":"REPORT","url":"https://bugzilla.suse.com/1161698"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186329"},{"type":"REPORT","url":"https://bugzilla.suse.com/1189325"},{"type":"REPORT","url":"https://bugzilla.suse.com/1189343"},{"type":"REPORT","url":"https://bugzilla.suse.com/1189345"},{"type":"REPORT","url":"https://bugzilla.suse.com/1189346"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19555"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19746"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19797"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-21680"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-21681"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-21682"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-21683"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3561"}],"affected":[{"package":{"name":"transfig","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/transfig&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/transfig&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/transfig&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/transfig&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/transfig&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}},{"package":{"name":"transfig","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","purl":"pkg:rpm/suse/transfig&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8a-2.17.1"}]}],"ecosystem_specific":{"binaries":[{"transfig":"3.2.8a-2.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3124-1.json"}}],"schema_version":"1.7.5"}