Publishing details

• Published on 2023-02-13
• Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by Amir Naseredini

Changelog

fig2dev (1:3.2.6a-6ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2019-14275.patch: fixed a buffer overflow in
      calc_arrow function.
    - debian/patches/CVE-2019-19555[-test].patch: fixed a buffer overflow in
      read_textobject function and added tests to see if it's fixed.
    - debian/patches/CVE-2020-21534.patch: fixed an out-of-bounds write
      in read_colordef function (CVE-2019-19797), a segmentation fault
      in read_objects function (CVE-2020-21530), a buffer overflow in
      read_textobject function (CVE-2020-21533), a buffer overflow in
      get_line function (CVE-2020-21534), a segmentation fault in
      gencgm_start function (CVE-2020-21535), and a buffer overflow in
      genptk_text function (CVE-2020-21675).
    - debian/patches/CVE-2020-21529.patch: fixed a buffer overflow in
      bezier_spline function.
    - debian/patches/CVE-2020-21531.patch: fixed a buffer overflow in
      conv_pattern_index function.
    - debian/patches/CVE-2020-21532.patch: fixed a buffer overflow in
      setfigfont function.
    - debian/patches/CVE-2020-21676.patch: fixed a buffer overflow in
      genpstrx_text function.
    - debian/patches/CVE-2021-3561.patch: fixed a flawed bounds check in
      read_objects function.
    - debian/patches/CVE-2021-32280.patch: fixed a NULL pointer dereference
      in compute_closed_spline function.
    - CVE-2019-14275
    - CVE-2019-19555
    - CVE-2019-19797
    - CVE-2020-21530
    - CVE-2020-21533
    - CVE-2020-21534
    - CVE-2020-21535
    - CVE-2020-21675
    - CVE-2020-21529
    - CVE-2020-21531
    - CVE-2020-21532
    - CVE-2020-21676
    - CVE-2021-3561
    - CVE-2021-32280

 -- Amir Naseredini <email address hidden>  Thu, 09 Feb 2023 16:51:42 +0000

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Built packages

• fig2dev Utilities for converting XFig figure files

• fig2dev-dbgsym debug symbols for fig2dev

• transfig transitional dummy package for fig2dev

Package files

• fig2dev-dbgsym_3.2.6a-6ubuntu1.1_amd64.ddeb (537.0 KiB)
• fig2dev-dbgsym_3.2.6a-6ubuntu1.1_arm64.ddeb (554.3 KiB)
• fig2dev-dbgsym_3.2.6a-6ubuntu1.1_armhf.ddeb (526.5 KiB)
• fig2dev-dbgsym_3.2.6a-6ubuntu1.1_i386.ddeb (491.0 KiB)
• fig2dev-dbgsym_3.2.6a-6ubuntu1.1_ppc64el.ddeb (707.1 KiB)
• fig2dev-dbgsym_3.2.6a-6ubuntu1.1_s390x.ddeb (565.2 KiB)
• fig2dev_3.2.6a-6ubuntu1.1.debian.tar.xz (222.0 KiB)
• fig2dev_3.2.6a-6ubuntu1.1.dsc (2.1 KiB)
• fig2dev_3.2.6a-6ubuntu1.1_amd64.deb (615.9 KiB)
• fig2dev_3.2.6a-6ubuntu1.1_arm64.deb (569.6 KiB)
• fig2dev_3.2.6a-6ubuntu1.1_armhf.deb (581.8 KiB)
• fig2dev_3.2.6a-6ubuntu1.1_i386.deb (610.2 KiB)
• fig2dev_3.2.6a-6ubuntu1.1_ppc64el.deb (640.9 KiB)
• fig2dev_3.2.6a-6ubuntu1.1_s390x.deb (579.2 KiB)
• fig2dev_3.2.6a.orig.tar.xz (495.9 KiB)
• transfig_3.2.6a-6ubuntu1.1_all.deb (2.9 KiB)