openSUSE-SU-2020:0115-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0115-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2020:0115-1
Upstream
CVE (7)
  • CVE-2020-6609
  • CVE-2020-6610
  • CVE-2020-6611
  • CVE-2020-6612
  • CVE-2020-6613
  • CVE-2020-6614
  • CVE-2020-6615
Related
CVE (7)
  • CVE-2020-6609
  • CVE-2020-6610
  • CVE-2020-6611
  • CVE-2020-6612
  • CVE-2020-6613
  • CVE-2020-6614
  • CVE-2020-6615
Published
2020-01-28T09:13:25Z
Modified
2026-02-04T04:26:03Z
Summary
Security update for libredwg
Details

This update for libredwg fixes the following issues:

libredwg was updated to release 0.10:

API breaking changes:

  • Added a new int *isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not.
  • removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and UNKNOWN_ENT left, with common_entity_data.
  • renamed BLOCK_HEADER.preview_data to preview, preview_data_size to preview_size.
  • renamed SHAPE.shape_no to style_id.
  • renamed CLASS.wasazombie to is_zombie.

Bugfixes:

  • Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  • Fixed encoding of added r2000 AUXHEADER address.
  • Fixed EED encoding from dwgrewrite.
  • Add several checks against [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522], [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524], [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526], [CVE-2020-6615, boo#1160527] This update was imported from the openSUSE:Leap:15.1:Update update project.
References

Affected packages

SUSE:Package Hub 15 SP1 / libredwg

Package

Name
libredwg
Purl
pkg:rpm/suse/libredwg&distro=SUSE%20Package%20Hub%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.10-bp151.2.6.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libredwg-devel":  "0.10-bp151.2.6.1",
            "libredwg-tools":  "0.10-bp151.2.6.1",
            "libredwg0":  "0.10-bp151.2.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0115-1.json"