fig2dev 1:3.2.6a-6ubuntu1.1: fig2dev 1:3.2.6a-6ubuntu1.1 for Ubuntu 18.04.6 LTS (bionic)

fig2dev 1:3.2.6a-6ubuntu1.1, released September 20, 2021, fixes 14 CVEs in fig2dev. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

n/a

No CVSS score published

Highest EPSS

0.0124

69th percentile

Priority of the 14 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 14

Fixed package versions

Product	Release	Fixed in
fig2dev	Ubuntu 18.04.6 LTS (bionic)	1:3.2.6a-6ubuntu1.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2019-14275	fig2dev: Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.	n/a	0.0124	None reported
Routine	CVE-2021-3561	fig2dev: An Out of Bounds flaw was found fig2dev version 3.2.8a	n/a	0.0118	None reported
Routine	CVE-2019-19797	transfig: read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.	n/a	0.0117	None reported
Routine	CVE-2020-21529	fig2dev: fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.	n/a	0.0109	None reported
Routine	CVE-2020-21532	fig2dev: fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.	n/a	0.0108	None reported
Routine	CVE-2020-21676	fig2dev: A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to...	n/a	0.0107	None reported
Routine	CVE-2019-19555	fig2dev: read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.	n/a	0.0107	None reported
Routine	CVE-2020-21531	transfig: fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.	n/a	0.0106	None reported
Routine	CVE-2020-21675	fig2dev: A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a...	n/a	0.0106	None reported
Routine	CVE-2021-32280	fig2dev: An issue was discovered in fig2dev before 3.2.8.	n/a	0.0098	None reported
Routine	CVE-2020-21535	fig2dev: fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.	n/a	0.0089	None reported
Routine	CVE-2020-21533	fig2dev: fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.	n/a	0.0087	None reported
Routine	CVE-2020-21534	fig2dev: fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.	n/a	0.0087	None reported
Routine	CVE-2020-21530	fig2dev: fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.	n/a	0.0072	None reported

Also fixes CVE-2019-14275

transfig 1:3.2.6a-6ubuntu1.1
transfig on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-fig2dev-1-3.2.6a-6ubuntu1.1">fig2dev 1:3.2.6a-6ubuntu1.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.