RHSA-2026:0700MediumCVSS 7.8
Red Hat Security Advisory: transfig security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-46397 — xfig: xfig: Stack-overflow allows possible code execution via local input manipulation
🎯 Affected products14
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-1:3.2.7b-11.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-1:3.2.7b-11.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-1:3.2.7b-11.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-1:3.2.7b-11.el9_7.src as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-1:3.2.7b-11.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debuginfo-1:3.2.7b-11.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debuginfo-1:3.2.7b-11.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debuginfo-1:3.2.7b-11.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debuginfo-1:3.2.7b-11.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debugsource-1:3.2.7b-11.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debugsource-1:3.2.7b-11.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debugsource-1:3.2.7b-11.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- transfig-debugsource-1:3.2.7b-11.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258