{"id":"openSUSE-SU-2023:0201-1","summary":"Security update for libredwg","details":"This update for libredwg fixes the following issues:\n\nUpdate to version 0.12.5.5907\n\nSecurity issues fixed:\n\n* CVE-2022-33025: Fixed multiple security issues [boo#1200898]\n* CVE-2023-36271: Fixed heap buffer overflow via the function bit_wcs2nlen [boo#1212709]\n* CVE-2023-36272: Fixed heap buffer overflow via the function bit_utf8_to_TU [boo#1212707]\n* CVE-2023-36273: Fixed heap buffer overflow via the function bit_calc_CRC [boo#1212706]\n* CVE-2023-36274: Fixed heap buffer overflow via the function bit_write_TF [boo#1212705]\n","modified":"2026-03-11T07:33:39.487050Z","published":"2023-08-02T09:53:16Z","related":["CVE-2022-33025","CVE-2023-36271","CVE-2023-36272","CVE-2023-36273","CVE-2023-36274"],"upstream":["CVE-2022-33025","CVE-2023-36271","CVE-2023-36272","CVE-2023-36273","CVE-2023-36274"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5EOM2KLYJEVITQUC3RNZBNGK6DL4RR4C/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200898"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212705"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212706"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212707"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212709"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-33025"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-36271"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-36272"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-36273"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-36274"}],"affected":[{"package":{"name":"libredwg","ecosystem":"SUSE:Package Hub 15 SP5","purl":"pkg:rpm/suse/libredwg&distro=SUSE%20Package%20Hub%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5.5907-bp155.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"libredwg0":"0.12.5.5907-bp155.3.3.1","libredwg-devel":"0.12.5.5907-bp155.3.3.1","libredwg-tools":"0.12.5.5907-bp155.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0201-1.json"}},{"package":{"name":"libredwg","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5.5907-bp155.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"libredwg-devel":"0.12.5.5907-bp155.3.3.1","libredwg-tools":"0.12.5.5907-bp155.3.3.1","libredwg0":"0.12.5.5907-bp155.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0201-1.json"}}],"schema_version":"1.7.5"}