openSUSE-SU-2020:0096-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0096-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2020:0096-1
Upstream
CVE (7)
  • CVE-2020-6609
  • CVE-2020-6610
  • CVE-2020-6611
  • CVE-2020-6612
  • CVE-2020-6613
  • CVE-2020-6614
  • CVE-2020-6615
Related
CVE (7)
  • CVE-2020-6609
  • CVE-2020-6610
  • CVE-2020-6611
  • CVE-2020-6612
  • CVE-2020-6613
  • CVE-2020-6614
  • CVE-2020-6615
Published
2020-01-22T23:11:47Z
Modified
2026-02-04T02:45:22Z
Summary
Security update for libredwg
Details

This update for libredwg fixes the following issues:

libredwg was updated to release 0.10:

API breaking changes:

  • Added a new int *isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not.
  • removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and UNKNOWN_ENT left, with common_entity_data.
  • renamed BLOCK_HEADER.preview_data to preview, preview_data_size to preview_size.
  • renamed SHAPE.shape_no to style_id.
  • renamed CLASS.wasazombie to is_zombie.

Bugfixes:

  • Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  • Fixed encoding of added r2000 AUXHEADER address.
  • Fixed EED encoding from dwgrewrite.
  • Add several checks against [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522], [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524], [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526], [CVE-2020-6615, boo#1160527]
References

Affected packages

openSUSE:Leap 15.1 / libredwg

Package

Name
libredwg
Purl
pkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.10-lp151.2.6.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libredwg-devel":  "0.10-lp151.2.6.1",
            "libredwg-tools":  "0.10-lp151.2.6.1",
            "libredwg0":  "0.10-lp151.2.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0096-1.json"