transfig-3.2.6a-5.el8_10

エラータID: AXSA:2026-048:02

Release date: 
Tuesday, January 20, 2026 - 21:46
Subject: 
transfig-3.2.6a-5.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.

Security Fix(es):

* xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-46397
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. transfig-3.2.6a-5.el8_10.src.rpm
    MD5: 369ca8afe2c04e38afe8d375e97f152e
    SHA-256: 4e70f5d5722911a648c7a7d564460544c218fc47ffa26714dee526d96a5655d3
    Size: 517.10 kB

Asianux Server 8 for x86_64
  1. transfig-3.2.6a-5.el8_10.x86_64.rpm
    MD5: bdfa0c97669673ef48c5b75202b8b85a
    SHA-256: fbfee89b274087efddc3deb1a82d3d4fc20c820caf38b7329ce727ea915fd757
    Size: 403.12 kB