It was discovered that transfig incorrectly handled certain FIG files. An
attacker could possibly use this to execute arbitrary code
(CVE-2018-16140).
- https://bugs.mageia.org/show_bug.cgi?id=23537
- https://ubuntu.com/security/notices/USN-3760-1
- https://www.cve.org/CVERecord?id=CVE-2018-16140
- 6/core/transfig-3.2.5d-9.2.mga6
Get the latest Linux and open source security news straight to your inbox.