7232 – [Anolis OS 23] Bugfix for CVE-2020-21532

Bug 7232 - [Anolis OS 23] Bugfix for CVE-2020-21532

Summary: [Anolis OS 23] Bugfix for CVE-2020-21532

Status:	RESOLVED FIXED

Alias:	None

Product:	Anolis OS 23
Classification:	Anolis OS
Component:	BaseOS Packages (show other bugs)	BaseOS Packages
Sub Component:
Version:	unspecified
Hardware:	All Linux

Importance:	P4-Low S4-trivial
Target Milestone:	---
Assignee:	happy_orange
QA Contact:	bolong_tbl

URL:
Whiteboard:
Keywords:	CVE

Depends on:
Blocks:

Reported:	2023-11-13 17:16 UTC by 小龙
Modified:	2023-11-14 11:26 UTC (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description 小龙 admin

2023-11-13 17:16:58 UTC

Description:
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Broken commit info:

Bugfix commit info:
https://sourceforge.net/p/mcj/fig2dev/ci/00cdedac7a0b029846dee891769a1e77df83a01b/ (3.2.8)
https://sourceforge.net/p/mcj/fig2dev/ci/421afa17d8cb8dafcaf3e6044a70790fa4fe307b/
https://sourceforge.net/p/mcj/fig2dev/ci/421afa17d8cb8dafcaf3e6044a70790fa4fe307b/.This
https://sourceforge.net/p/mcj/fig2dev/ci/421afa17d8cb8dafcaf3e6044a70790fa4fe307b/ (3.2.8)
https://sourceforge.net/p/mcj/fig2dev/ci/00cdedac7a0b029846dee891769a1e77df83a01b/

Comment 1 小龙 admin

2023-11-14 11:26:47 UTC

PR: 
https://gitee.com/src-anolis-os/transfig/pulls/2