Vulnerability Database · Debian · Package report
fig2dev: vulnerability history, versions and safety
fig2dev is a package in the Debian ecosystem. Vulert records 66 vulnerabilities for it across 3 releases, from Nov 2017 to Apr 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on fig2dev i
Updated on 23 Oct 2026
Every vulnerability Vulert records for this package has a fix, and the newest was recorded 30 Apr 2025. Apply the fixes listed below and you are clear.
What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →
- Vulnerabilities on record 66 over 7 years · 0 in the last year i
- Latest disclosure 30 Apr 2025 i
- Highest CVSS 7.8 i
- With no published fix 0 i
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert holds for fig2dev, newest first, with the vulnerabilities that name it. A version with a count of zero has no recorded vulnerabilities; open a version to see the vulnerabilities it is exposed to.
| Version | Vulert vulnerabilities | Fix published | Details |
|---|---|---|---|
| 1:3.2.8-3 | U20 | Yes | Details → |
| 1:3.2.8-3+deb11u2 | U9 | Yes | Details → |
| 1:3.2.8-3+deb11u1 | U16 | Yes | Details → |
Newest 3 of 3 versions on record. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 66 were recorded in the last 12 months.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for fig2dev
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| Buffer Underwrite Vulnerability in fig2dev Package | 7.8 high | 1:3.2.7a-3 | 30 Aug 2018 |
| Out of Bounds Vulnerability in fig2dev: Memory Corruption Risk | 7.1 high | 1:3.2.8-3 | 26 May 2021 |
| Denial-of-Service Vulnerability in fig2dev Package: CVE-2017-16899 | 7.1 high | 1:3.2.6a-5 | 20 Nov 2017 |
| Stack-based Buffer Overflow in Xfig fig2dev 3.2.7a | 5.5 medium | 1:3.2.7a-7 | 26 Jul 2019 |
| Denial of Service Vulnerability in fig2dev: NULL Pointer Dereference | 5.5 medium | 1:3.2.7b-5 | 20 Sep 2021 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
