[SECURITY] [DLA 2778-1] fig2dev security update

Debian LTS Advisory DLA-2778-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 04, 2021 https://wiki.debian.org/LTS Package : fig2dev Version : 1:3.2.6a-2+deb9u4 CVE ID : CVE-2019-19797 CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532...

CVE-2021-32280

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...

CVE-2021-32280

CVE-2021-32280 affects fig2dev prior to version 3.2.8. A NULL pointer dereference in compute_closed_spline() (trans_spline.c) can lead to Denial of Service. Affected advisories and notices (Astra Linux, Red Hat, Amazon Linux variants) confirm the issue and list 3.2.8 as the fixed version. Remedia...

menupix.com XSS vulnerability

Vulnerable URL: http://www.menupix.com/mxrestaurantphoto.php?id=1%22%27--!%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E\r\nhttp://www.menupix.com/mxsendtophone.php?domainurl=boston=1%22%27--!%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at...