{"schemaVersion":3,"id":"OPENSUSE-SU-2020:0068-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for libredwg\n\nThis update for libredwg fixes the following issues:\n\nlibredwg was updated to release 0.9.3:\n\n* Added the -x,--extnames option to dwglayers for r13-r14 DWGs.\n* Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle\n  for r13.\n* Add DICTIONARY.itemhandles[] for r13 and r14.\n* Fixed some dwglayers null pointer derefs, and flush its output\n  for each layer.\n* Added several overflow checks from fuzzing\n  [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],\n  [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],\n  [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]\n* Disallow illegal SPLINE scenarios\n  [CVE-2019-20009, boo#1159824]\n\nUpdate to release 0.9.1:\n\n* Fixed more null pointer dereferences, overflows, hangs and\n  memory leaks for fuzzed (i.e. illegal) DWGs.\n\nUpdate to release 0.9 [boo#1154080]:\n\n* Added the DXF importer, using the new dynapi and the r2000\n  encoder. Only for r2000 DXFs.\n* Added utf8text conversion functions to the dynapi.\n* Added 3DSOLID encoder.\n* Added APIs to find handles for names, searching in tables\n  and dicts.\n* API breaking changes - see NEWS file in package.\n* Fixed null pointer dereferences, and memory leaks (except DXF\n  importer)\n  [boo#1129868, CVE-2019-9779]\n  [boo#1129869, CVE-2019-9778]\n  [boo#1129870, CVE-2019-9777]\n  [boo#1129873, CVE-2019-9776]\n  [boo#1129874, CVE-2019-9773]\n  [boo#1129875, CVE-2019-9772]\n  [boo#1129876, CVE-2019-9771]\n  [boo#1129878, CVE-2019-9775]\n  [boo#1129879, CVE-2019-9774]\n  [boo#1129881, CVE-2019-9770]\n\nUpdate to 0.8:\n\n* add a new dynamic API, read and write all header and object\n  fields by name\n* API breaking changes\n* Fix many errors in DXF output\n* Fix JSON output\n* Many more bug fixes to handle specific object types","dates":{"published":"2020-01-17T11:15:41.000Z","modified":"2026-02-04T03:51:05.232Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"libredwg&distro=openSUSE Leap 15.1","name":"libredwg","label":"libredwg&distro=openSUSE Leap 15.1","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/libredwg&distro=openSUSE Leap 15.1","purlType":"rpm","versions":[{"text":"< 0.9.3-lp151.2.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.3-lp151.2.3.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7MX6MDGMFDNPZMSX3CCI2TRTGEYIQOL6/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1129868","label":"bugzilla.suse.com/1129868","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129869","label":"bugzilla.suse.com/1129869","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129870","label":"bugzilla.suse.com/1129870","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129873","label":"bugzilla.suse.com/1129873","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129874","label":"bugzilla.suse.com/1129874","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129875","label":"bugzilla.suse.com/1129875","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129876","label":"bugzilla.suse.com/1129876","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129878","label":"bugzilla.suse.com/1129878","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129879","label":"bugzilla.suse.com/1129879","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129881","label":"bugzilla.suse.com/1129881","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1154080","label":"bugzilla.suse.com/1154080","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159824","label":"bugzilla.suse.com/1159824","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159825","label":"bugzilla.suse.com/1159825","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159826","label":"bugzilla.suse.com/1159826","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159827","label":"bugzilla.suse.com/1159827","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159828","label":"bugzilla.suse.com/1159828","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159831","label":"bugzilla.suse.com/1159831","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159832","label":"bugzilla.suse.com/1159832","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20009","label":"www.suse.com/security/cve/CVE-2019-20009","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20010","label":"www.suse.com/security/cve/CVE-2019-20010","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20011","label":"www.suse.com/security/cve/CVE-2019-20011","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20012","label":"www.suse.com/security/cve/CVE-2019-20012","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20013","label":"www.suse.com/security/cve/CVE-2019-20013","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20014","label":"www.suse.com/security/cve/CVE-2019-20014","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20015","label":"www.suse.com/security/cve/CVE-2019-20015","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9770","label":"www.suse.com/security/cve/CVE-2019-9770","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9771","label":"www.suse.com/security/cve/CVE-2019-9771","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9772","label":"www.suse.com/security/cve/CVE-2019-9772","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9773","label":"www.suse.com/security/cve/CVE-2019-9773","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9774","label":"www.suse.com/security/cve/CVE-2019-9774","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9775","label":"www.suse.com/security/cve/CVE-2019-9775","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9776","label":"www.suse.com/security/cve/CVE-2019-9776","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9777","label":"www.suse.com/security/cve/CVE-2019-9777","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9778","label":"www.suse.com/security/cve/CVE-2019-9778","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9779","label":"www.suse.com/security/cve/CVE-2019-9779","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-20009","CVE-2019-20010","CVE-2019-20011","CVE-2019-20012","CVE-2019-20013","CVE-2019-20014","CVE-2019-20015","CVE-2019-9770","CVE-2019-9771","CVE-2019-9772","CVE-2019-9773","CVE-2019-9774","CVE-2019-9775","CVE-2019-9776","CVE-2019-9777","CVE-2019-9778","CVE-2019-9779"],"downstream":[],"duplicates":[],"related":["CVE-2019-20009","CVE-2019-20010","CVE-2019-20011","CVE-2019-20012","CVE-2019-20013","CVE-2019-20014","CVE-2019-20015","CVE-2019-9770","CVE-2019-9771","CVE-2019-9772","CVE-2019-9773","CVE-2019-9774","CVE-2019-9775","CVE-2019-9776","CVE-2019-9777","CVE-2019-9778","CVE-2019-9779"]},"timeline":[{"kind":"published","date":"2020-01-17T11:15:41.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:51:05.232Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T09:44:25.075Z","stale":false,"partial":false}}