openSUSE-SU-2020:0096-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0096-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2020:0096-1
Related
Published
2020-01-22T23:11:47Z
Modified
2020-01-22T23:11:47Z
Summary
Security update for libredwg
Details

This update for libredwg fixes the following issues:

libredwg was updated to release 0.10:

API breaking changes:

  • Added a new int *isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not.
  • removed the UNKNOWN supertype, there are only UNKNOWNOBJ and UNKNOWNENT left, with commonentitydata.
  • renamed BLOCKHEADER.previewdata to preview, previewdatasize to preview_size.
  • renamed SHAPE.shapeno to styleid.
  • renamed CLASS.wasazombie to is_zombie.

Bugfixes:

  • Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  • Fixed encoding of added r2000 AUXHEADER address.
  • Fixed EED encoding from dwgrewrite.
  • Add several checks against [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522], [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524], [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526], [CVE-2020-6615, boo#1160527]
References

Affected packages

openSUSE:Leap 15.1 / libredwg

Package

Name
libredwg
Purl
pkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10-lp151.2.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "libredwg-devel": "0.10-lp151.2.6.1",
            "libredwg-tools": "0.10-lp151.2.6.1",
            "libredwg0": "0.10-lp151.2.6.1"
        }
    ]
}