Ubuntu
fig2dev package

fig2dev 1:3.2.6a-6ubuntu1.1 source package in Ubuntu

Changelog

fig2dev (1:3.2.6a-6ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2019-14275.patch: fixed a buffer overflow in
      calc_arrow function.
    - debian/patches/CVE-2019-19555[-test].patch: fixed a buffer overflow in
      read_textobject function and added tests to see if it's fixed.
    - debian/patches/CVE-2020-21534.patch: fixed an out-of-bounds write
      in read_colordef function (CVE-2019-19797), a segmentation fault
      in read_objects function (CVE-2020-21530), a buffer overflow in
      read_textobject function (CVE-2020-21533), a buffer overflow in
      get_line function (CVE-2020-21534), a segmentation fault in
      gencgm_start function (CVE-2020-21535), and a buffer overflow in
      genptk_text function (CVE-2020-21675).
    - debian/patches/CVE-2020-21529.patch: fixed a buffer overflow in
      bezier_spline function.
    - debian/patches/CVE-2020-21531.patch: fixed a buffer overflow in
      conv_pattern_index function.
    - debian/patches/CVE-2020-21532.patch: fixed a buffer overflow in
      setfigfont function.
    - debian/patches/CVE-2020-21676.patch: fixed a buffer overflow in
      genpstrx_text function.
    - debian/patches/CVE-2021-3561.patch: fixed a flawed bounds check in
      read_objects function.
    - debian/patches/CVE-2021-32280.patch: fixed a NULL pointer dereference
      in compute_closed_spline function.
    - CVE-2019-14275
    - CVE-2019-19555
    - CVE-2019-19797
    - CVE-2020-21530
    - CVE-2020-21533
    - CVE-2020-21534
    - CVE-2020-21535
    - CVE-2020-21675
    - CVE-2020-21529
    - CVE-2020-21531
    - CVE-2020-21532
    - CVE-2020-21676
    - CVE-2021-3561
    - CVE-2021-32280

 -- Amir Naseredini <email address hidden>  Thu, 09 Feb 2023 16:51:42 +0000

Upload details

Uploaded by:
Amir Naseredini
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe misc
Bionic security universe misc

Downloads

File Size SHA-256 Checksum
fig2dev_3.2.6a.orig.tar.xz 495.9 KiB 5e61a3d9a4f83db4b3199ee82dd54bb65b544369f1e8e38a2606c44cf71667a7
fig2dev_3.2.6a-6ubuntu1.1.debian.tar.xz 222.0 KiB 0a94d357035317a6b070f044d3ebde7533b9d015b9703162c5ea8df07c4528e9
fig2dev_3.2.6a-6ubuntu1.1.dsc 2.1 KiB 3fe2a8c64954a20705c8a8b569cb438ca0d2d9a068ef57f8fd9ff975b56c01bf

View changes file

Binary packages built by this source

fig2dev: Utilities for converting XFig figure files

 This package contains utilities (mainly fig2dev) to handle XFig
 (Facility for Interactive Generation of figures) files.
 .
 It can convert files produced by xfig to box, cgm, dxf, epic, eepic,
 eepicemu, emf, eps, gbx, ge, gif, ibmgl, jpeg, latex, map (HTML image
 map), mf (MetaFont), mp (MetaPost), mmp (Multi-Meta-Post), pcx, pdf,
 pdftex, pdftex_t, pic, pict2e, pictex, png, ppm, ps, pstex, pstex_t,
 pstricks, ptk (Perl/tk), shape, sld (AutoCad slide format), svg,
 textyl, tiff, tikz, tk (Tcl/Tk), tpic, xbm and xpm.

fig2dev-dbgsym: debug symbols for fig2dev
transfig: transitional dummy package for fig2dev

 This is a transitional dummy package. It can safely be removed.