Debian Patches

Status for fig2dev/1:3.2.8b-3+deb12u2

Patch Description Author Forwarded Bugs Origin Last update
29_RGBFILE.patch rgb.txt can not be located via FIG2DEV_RGBFILE environment variable. This allows one to run the test suite without the package being
installed before.
Roland Rosenfeld <roland@debian.org> invalid
30_epsimport.patch [PATCH] Correct a typo causing incorrect eps import, #137 Thomas Loimer <thomas.loimer@tuwien.ac.at> yes upstream https://sourceforge.net/p/mcj/fig2dev/ci/1b09a885a8f0309bf1170ddcf07673801c79f895/ 2021-09-28
31_testsuite-gs9.56.patch Adapt testsuite to cope with ghostscript 9.56 Roland Rosenfeld <roland@debian.org> invalid
32_pass_langname.patch Pass output language name to driver, ticket #139 The output driver is first guessed from the output filename suffix, and the
output driver is called with the -L option. If the -L option is specified on
the command line, the output driver is called a second time, overriding the
first call. In the first call, the language name was not passed to the driver.
This is now fixed. A regression from commit [b4a152].
Thomas Loimer <thomas.loimer@tuwien.ac.at> yes upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/6fc5918 2021-11-30
33_sanitize_rect.patch Sanitize rectangles with less than 4 corners, #142 Box objects, e.g., rectangles, were closed and probably further sanitized,
regardless of the number of points. Only close boxes, and probably sanitize
them further, if they have at least four points. A NULL pointer dereference
was triggered for the gbx output language, ticket [#142].
Thomas Loimer <thomas.loimer@tuwien.ac.at> yes upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/6678ad8 2022-05-01
34_sanitize_arc.patch Sanitize arc objects Make sure, that the radius of an arc is larger than one Fig unit. Also, let
the distance between the center and the last point on the arc be equal to the
distance between the center and the first point on the arc.
Thomas Loimer <thomas.loimer@tuwien.ac.at> no upstream, https://sourceforge.net/p/mcj/fig2dev/ci/c01c4d6 2022-08-11
35_pict2e_output.patch Pict2e output: Arcs ending at multiples of pi/4, #145, #148 For the pict2e output language, arcs are drawn by first constructing a circle
of the same radius, generated from a spline. A section corresponding to the
arc angle is then cut out from the line forming the circle. Find the end point
on the circle by comparing the short coordinate of each point with the sinus
or cosinus, respectively, of the end angle times the radius of the circle.
Comparing the long coordinate, apart from being a glancing intersection, may
fail, since the constructed spline slightly wobbles around the true radius.
Less than 1.5 promille, but enough to trigger an error, see tickets #145 and
#148.
Thomas Loimer <thomas.loimer@tuwien.ac.at> yes upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/ed4d044 2022-08-11
36_arrowhead.patch Accept arrowheads without any points, ticket #146 If an arrowhead does not contain any point, fig2dev only crashes for the
pict2e output language. Nevertheless, check the number of points in an
arrowhead also for the mp and ps output languages.
Thomas Loimer <thomas.loimer@tuwien.ac.at> yes upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/a45dbb6 2022-08-11
37_arrow2point.patch Arrow on a two-point, 0 thickness line, ticket #147 In a specially crafted fig file with magnification 12 instead of 1200, an
arrow on a short line resulted in invalid memory access.
Thomas Loimer <thomas.loimer@tuwien.ac.at> no upstream, https://sourceforge.net/p/mcj/fig2dev/ci/6676fe5 2022-08-12
38_CVE-2025-31162.patch Reject huge pattern lengths, ticket #185 Reject patterned lines, e.g., dashed lines, where the pattern length exceeds
80 inches.
This fixes CVE-2025-31162
Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/da8992f 2025-01-22
39_CVE-2025-31163.patch Reject arcs with co-incident points, ticket #186 This fixes CVE-2025-31163. Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/c8a87d2 2025-01-22
40_CVE-2025-31164.patch Allow an arc-box with zero radius, ticket #184 In the pict2e output, a rectangle with rounded corners, dashed line type and
zero corner-radius would cause a crash. Convert rectangles with rounded
corners and zero corner-radius to regular rectangles.
This fixes CVE-2025-31164.
Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/ff9aba2 2025-01-21
41_CVE-2025-46397.patch Detect nan in spline control values, ticket #192 Fixes CVE-2025-46397 Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/dfa8b66 2025-04-10
42_CVE-2025-46398.patch Permit \0 in the second line in the fig file, #191 Fix CVE-2025-46398 Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/5f22009 2025-04-08
43_CVE-2025-46399.patch ge output: correct spline computation, ticket #190 Fix CVE-2025-46399 Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/2bd6c0b 2025-04-08
44_CVE-2025-46400.patch Reject arcs with a radius smaller than 3, #187 An arc with too small radius caused a crash in pict2e output. Instead
of dealing with such arcs in the pict2e driver, reject them already
when reading.
Fixes CVE-2025-46400
Thomas Loimer <thomas.loimer@tuwien.ac.at> not-needed upstream upstream, https://sourceforge.net/p/mcj/fig2dev/ci/c4465e0 2025-01-25

All known versions for source package 'fig2dev'

Links