UBUNTU-CVE-2020-36133

AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partitionsearch.h...

openSUSE 15 Security Update : transfig (openSUSE-SU-2021:1481-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1481-1 advisory. - fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c. CVE-2020-21529 - fig2dev 3.2.7b contains a...

OSV-2021-1563 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40915 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanfilteredsymbols scanallsymbols...

RHEL 8 : openjpeg2 (RHSA-2021:4251)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4251 advisory. OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. The following packages have been upgraded to a...

CentOS 8 : openjpeg2 (CESA-2021:4251)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4251 advisory. - openjpeg: division-by-zero in functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c CVE-2018-20845 - openjpeg: integer overflow in functio...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:1458-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

OSV-2021-1526 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40600 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromsubstr...

SUSE SLES11 Security Update : transfig (SUSE-SU-2021:14836-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14836-1 advisory. Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline function in...

openSUSE 15 Security Update : transfig (openSUSE-SU-2021:1439-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1439-1 advisory. - fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c. CVE-2020-21529 - fig2dev 3.2.7b contains a...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:1439-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

SUSE: Security Advisory (SUSE-SU-2021:3585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:14836-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : transfig (SUSE-SU-2021:3584-1)

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3584-1 advisory. Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline functio...

SUSE SLES12 Security Update : transfig (SUSE-SU-2021:3585-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3585-1 advisory. Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline...

openSUSE: Security Advisory for transfig (openSUSE-SU-2021:3584-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OSV-2021-1493 Global-buffer-overflow in fb_label_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40368 Crash type: Global-buffer-overflow WRITE 1 Crash state: fblabelname readasourcefile performanassemblypass...

OSV-2021-1473 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40118 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromstr...

OSV-2021-1458 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39986 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr utildecodeproto...

Debian DLA-2778-1 : fig2dev - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2778 advisory. Multiple security vulnerabilities have been discovered in fig2dev, utilities for converting XFig figure files. Buffer overflows, out-of-bounds reads and NULL point...

OSV-2021-1427 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39699 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr frpairvaluefromstr...