7234 – [Anolis OS 23] Bugfix for CVE-2020-21529

Bug 7234 - [Anolis OS 23] Bugfix for CVE-2020-21529

Summary: [Anolis OS 23] Bugfix for CVE-2020-21529

Status:	RESOLVED FIXED

Alias:	None

Product:	Anolis OS 23
Classification:	Anolis OS
Component:	BaseOS Packages (show other bugs)	BaseOS Packages
Sub Component:
Version:	unspecified
Hardware:	All Linux

Importance:	P4-Low S4-trivial
Target Milestone:	---
Assignee:	happy_orange
QA Contact:	bolong_tbl

URL:
Whiteboard:
Keywords:	CVE

Depends on:
Blocks:

Reported:	2023-11-13 17:16 UTC by 小龙
Modified:	2023-11-14 11:27 UTC (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description 小龙 admin

2023-11-13 17:16:58 UTC

Description:
fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

Broken commit info:

Bugfix commit info:
https://sourceforge.net/p/mcj/fig2dev/ci/d70e4ba6308046f71cb51f67db8412155af52411/
https://sourceforge.net/p/mcj/fig2dev/ci/e3cee2576438f47a3b8678c6960472e625f8f7d7/
https://sourceforge.net/p/mcj/fig2dev/ci/d70e4ba6308046f71cb51f67db8412155af52411/ (3.2.8)
https://sourceforge.net/p/mcj/fig2dev/ci/e3cee2576438f47a3b8678c6960472e625f8f7d7/ (3.2.8)

Comment 1 小龙 admin

2023-11-14 11:27:23 UTC

PR: 
https://gitee.com/src-anolis-os/transfig/pulls/2