{"id":"openSUSE-SU-2022:0067-1","summary":"Security update for libdxfrw, librecad","details":"This update for libdxfrw, librecad fixes the following issues:\n\n- Update to version 1.0.1+git.20220109:\n\n  * fixed ambiguous error for DRW_Dimension::parseDwg()\n  * fixed enless while()-loop for pre 2004 versions\n  * dwgReader::readDwgObjects() stop reading after 1st error\n  * dwgReader::readDwgEntities() stop reading after 1st error\n  * replace ENTRY_PARSE macro with template method\n  * remove unused DRW_Class::parseCode() method\n  * protect vector\u003c\u003e.reserve() calls\n  * Added NULL check for hatch code 93\n  * Fix bounds check in DRW_LWPolyline\n  * fix, check maxClassNum for valid value\n  * fixed wrong 2010+ check for 64-bit size\n  * Set compiler warnings on by default, because makes harder for bugs to go undetected. \tmodified:   CMakeLists.txt\n  * Fixed fall through and other warnings (#54)\n  * fix 'Vertex ID' printout\n\n- Update to version 1.0.1+git.20211110:\n\n  * fixed heap use after free vulnerability CVE-2021-21900 (boo#1192938)\n  * minor improvements to dwg2dxf, formatting and message output on success\n  * fixed heap buffer overflow vulnerability CVE-2021-21899 (boo#1192937)\n  * dwg2dxf - enable debug output of libdxfrw by command line switch\n  * fixed out-of-bounds write vulnerability CVE-2021-21898 (boo#1192936)\n  * fixed please note section formatting\n  * updated README.md for LibreCAD_3 branch and sf.net successor\n  * fixed LibreCAD 2 issue #1371, read failed with binary DXF\n  * Use ununordered_map instead of map\n  * manual merge changes from LibreCAD2\n  * and much more\n\n- Update to version 1.0.1+git.20200429:\n\n  * Fix includes install dir\n  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages\n  * Add archive destination in install\n  * Install DXFRW::dxfrw target\n  * Remove duplicate target properties\n  * Remove version from pkg-config file\n  * Let CMake handle C++11 compiler definition\n  * Change minimal required CMake version to 3.0\n  * cmake: add doc target\n  * README.md: fix typo\n  * cmake: generate and install pkgconfig\n  * cmake: add one for dwg2dxf\n  * cmake: set library VERSIONs\n  * cmake: use GNUInstallDirs\n\n- Update to version 0.6.3+git.20190501:\n\n  * Add build status and update example link\n  * Add Travis-CI script\n  * [#10] Fix compilation on GCC\n  * Fix bugs with .dwg import of TEXT and MTEXT entities\n  * This was unnecessary\n  * Link libdxfrw against libstdc++\n  * Return an error when the file ends prematurely\n  * Add version getter\n  * Fix polyline 2d/3d write\n  * Initialize return buffers in GetRawChar8 et al.\n\n- update to 2.2.0-rc3\n\n  * major release\n  * DWG imports are more reliable now\n  * and a lot more of bugfixes and improvements\n","modified":"2026-03-11T07:33:23.349006Z","published":"2022-03-02T21:21:30Z","related":["CVE-2021-21898","CVE-2021-21899","CVE-2021-21900"],"upstream":["CVE-2021-21898","CVE-2021-21899","CVE-2021-21900"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6TWLTKRSHNPCLQL7UXQSITHNYJT5XSK5/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192936"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192937"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192938"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-21898"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-21899"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-21900"}],"affected":[{"package":{"name":"libdxfrw","ecosystem":"SUSE:Package Hub 15 SP3","purl":"pkg:rpm/suse/libdxfrw&distro=SUSE%20Package%20Hub%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20220109-bp153.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"librecad-parts":"2.2.0~rc3-bp153.2.3.1","librecad":"2.2.0~rc3-bp153.2.3.1","libdxfrw-devel":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw-tools":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw1":"1.0.1+git.20220109-bp153.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0067-1.json"}},{"package":{"name":"librecad","ecosystem":"SUSE:Package Hub 15 SP3","purl":"pkg:rpm/suse/librecad&distro=SUSE%20Package%20Hub%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0~rc3-bp153.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"librecad":"2.2.0~rc3-bp153.2.3.1","libdxfrw-devel":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw-tools":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw1":"1.0.1+git.20220109-bp153.2.3.1","librecad-parts":"2.2.0~rc3-bp153.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0067-1.json"}},{"package":{"name":"libdxfrw","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/libdxfrw&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20220109-bp153.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"libdxfrw-devel":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw-tools":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw1":"1.0.1+git.20220109-bp153.2.3.1","librecad-parts":"2.2.0~rc3-bp153.2.3.1","librecad":"2.2.0~rc3-bp153.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0067-1.json"}},{"package":{"name":"librecad","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/librecad&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0~rc3-bp153.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"libdxfrw-devel":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw-tools":"1.0.1+git.20220109-bp153.2.3.1","libdxfrw1":"1.0.1+git.20220109-bp153.2.3.1","librecad-parts":"2.2.0~rc3-bp153.2.3.1","librecad":"2.2.0~rc3-bp153.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0067-1.json"}}],"schema_version":"1.7.5"}