PT-2020-10870

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a stack overflow in bits.c, possibly related to bit read TF. Recommendations For GNU LibreDWG versions through 0.9.3, consider updating to a...

CVE-2019-20912: Out-of-bounds Write

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bitreadTF...

CVE-2019-20909: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodeLWPOLYLINE in dwg.spec...

PT-2020-10867

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode LWPOLYLINE in dwg.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consider...

CVE-2019-20915: Out-of-bounds Read

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...

PT-2020-10873

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description An issue was discovered in GNU LibreDWG where crafted input leads to a heap-based buffer over-read in the bit write TF function in bits.c. Recommendations For GNU LibreDWG versions prior to 0.9....

OPENSUSE-SU-2020:0115-1 Security update for libredwg

This update for libredwg fixes the following issues: libredwg was updated to release 0.10: API breaking changes: Added a new int isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not. removed the UNKNOWN supertype, there are only UNKNOWNOBJ and UNKNOWNE...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0115-1 Rating: moderate References: 1160520 1160522 1160523 1160524 1160525 1160526 1160527 Cross-References: CVE-2020-6609 CVE-2020-6610 CVE-2020-6611 CVE-2020-6612 CVE-2020-6613 CVE-2020-6614 CVE-2020-6615...

openSUSE: Security Advisory for libredwg (openSUSE-SU-2020:0096_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for libredwg (openSUSE-SU-2020:0068_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libredwg (openSUSE-2020-96)

This update for libredwg fixes the following issues : libredwg was updated to release 0.10 : API breaking changes : - Added a new int isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not. - removed the UNKNOWN supertype, there are only UNKNOWNOBJ and...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0096-1 Rating: moderate References: 1160520 1160522 1160523 1160524 1160525 1160526 1160527 Cross-References: CVE-2020-6609 CVE-2020-6610 CVE-2020-6611 CVE-2020-6612 CVE-2020-6613 CVE-2020-6614 CVE-2020-6615...

OPENSUSE-SU-2020:0096-1 Security update for libredwg

This update for libredwg fixes the following issues: libredwg was updated to release 0.10: API breaking changes: Added a new int isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not. removed the UNKNOWN supertype, there are only UNKNOWNOBJ and UNKNOWNE...

OPENSUSE-SU-2020:0095-1 Security update for libredwg

This update for libredwg fixes the following issues: libredwg was updated to release 0.9.3: Added the -x,--extnames option to dwglayers for r13-r14 DWGs. Fixed some leaks: SORTENTSTABLE, PROXYENTITY.ownerhandle for r13. Add DICTIONARY.itemhandles for r13 and r14. Fixed some dwglayers null pointer...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0095-1 Rating: moderate References: 1129868 1129869 1129870 1129873 1129874 1129875 1129876 1129878 1129879 1129881 1154080 1159824 1159825 1159826 1159827 1159828 1159831 1159832 Cross-References:...

openSUSE Security Update : libredwg (openSUSE-2020-68)

This update for libredwg fixes the following issues : libredwg was updated to release 0.9.3 : - Added the -x,--extnames option to dwglayers for r13-r14 DWGs. - Fixed some leaks: SORTENTSTABLE, PROXYENTITY.ownerhandle for r13. - Add DICTIONARY.itemhandles for r13 and r14. - Fixed some dwglayers NU...

OPENSUSE-SU-2020:0068-1 Security update for libredwg

This update for libredwg fixes the following issues: libredwg was updated to release 0.9.3: Added the -x,--extnames option to dwglayers for r13-r14 DWGs. Fixed some leaks: SORTENTSTABLE, PROXYENTITY.ownerhandle for r13. Add DICTIONARY.itemhandles for r13 and r14. Fixed some dwglayers null pointer...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0068-1 Rating: moderate References: 1129868 1129869 1129870 1129873 1129874 1129875 1129876 1129878 1129879 1129881 1154080 1159824 1159825 1159826 1159827 1159828 1159831 1159832 Cross-References:...

GNU LibreDWG Invalid Pointer Dereference Vulnerability

LibreDWG is a free C library for reading and writing DWG files. An invalid pointer dereference vulnerability exists in dwgdynapientityvalue in dynapi.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a denial of service...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04066)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in bfrread in decode.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...