The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0756 advisory.

    The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a     specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents     which are portable (i.e., they can be printed in a wide variety of environments).  Install transfig if you     need a utility for translating FIG or PIC figures into certain graphics languages.

    Security Fix(es):

    * xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : transfig (RHSA-2026:0756)

high Nessus Plugin ID 291329

Version 1.1