File _patchinfo of Package patchinfo.8599
<patchinfo incident="8599">
<issue tracker="bnc" id="1106531">VUL-1: CVE-2018-16140: transfig: A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7aallows an attacker to write prior to the beginning of the buffer via a crafted.fig file.</issue>
<issue tracker="cve" id="2018-16140"/>
<category>security</category>
<rating>low</rating>
<packager>WernerFink</packager>
<description>This update for transfig fixes the following issues:
Security issue fixed:
- CVE-2018-16140: Fixed a buffer underwrite vulnerability in get_line() in
read.c, which allowed an attacker to write prior to the beginning of the
buffer via specially crafted .fig file (bsc#1106531)
</description>
<summary>Security update for transfig</summary>
</patchinfo>