Описание
Security update for libredwg
This update for libredwg fixes the following issues:
Changes in libredwg:
-
Update to snapshot 0.14.8413
- fix dwg_next_entity NULL pointer dereference [CVE-2026-15184, boo#1271170]
- Fix dwg_bmp thumbnail overflow checks [CVE-2026-15181, boo#1271169]
- Resolve NULL pointer dereference (SEGV) in match_BLOCK_HEADER [CVE-2026-9529, boo#1266380]
- Added DXB (binary DXF) support: dwgwrite/dwgread/dwg2dxf accept DXB input/output, and dxfwrite accepts DXB.
- Minor features:
- R2007+ split string stream encoding for Header, Classes, and objects.
- Added cycle checks in entity link chains.
- Added release helpers and improved CI (ODAFileConverter QT6, xvfb-run).
- dwgfuzz: show mode with --version.
-
update to 0.14:
- Write support for r2004 (AC1018) DWG files. The encoder now produces compressed, encrypted section headers and the LZ77-compressed object data layout required since r2004.
- Split large object files (encode, decode) into 2 objects, significantly reducing peak memory usage during compilation and enabling parallel builds to scale better.
- dwgadd: handle fields (e.g. layer, ltype, style) can now be
set by table-record name in addition to raw handle references.
A string value like
line.layer = "FOO"is resolved via dwg_find_tablehandle() at parse time. - Added DXB (binary DXF) support: dwgwrite/dwgread/dwg2dxf accept DXB input/output, and dxfwrite accepts DXB.
- R2007+ split string stream encoding for Header, Classes, and objects.
- Added cycle checks in entity link chains. GH #1226.
- Added regression tests for decompress_r2007 OOB reads and R2004 section decompression. Added dwgfilter.test.
- Added release helpers and improved CI (ODAFileConverter QT6, xvfb-run).
- dwgfuzz: show mode with --version.
- API/ABI changes (source-incompatible):
- Renamed HEADER/2NDHEADER.is_maint to maint_rel_version.
- Renamed PROXY_OBJECT.dwg_versions.
- Bumped SO_VERSION to 0:14:0.
-
Update to snapshot 0.13.4.8200
- Write support for r2004 (AC1018) DWG files. The encoder now produces compressed, encrypted section headers and the LZ77-compressed object data layout required since r2004.
- Split large object files (encode, decode) into 2 objects, significantly reducing peak memory usage during compilation and enabling parallel builds to scale better.
- dwgadd: handle fields (e.g. layer, ltype, style) can now be set
by table-record name in addition to raw handle references. A
string value like
line.layer = "FOO"is resolved via dwg_find_tablehandle() at parse time. - Fix decompress_R2004_section buffer overflow [CVE-2026-9501, CVE-2026-9502, CVE-2026-9529, CVE-2026-9530, boo#1266377, boo#1266378, boo#1266380, boo#1266287]
- Fix dwg_next_entity NULL pointer dereference [CVE-2026-9503, boo#1266379]
- Fix NULL pointer dereferences in DXF output for corrupted DWG input [CVE-2026-9504, boo#1266321]
- decode: fix decompression overflow [CVE-2026-9605, boo#1266365]
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1266287
- SUSE Bug 1266321
- SUSE Bug 1266365
- SUSE Bug 1266377
- SUSE Bug 1266378
- SUSE Bug 1266379
- SUSE Bug 1266380
- SUSE Bug 1271169
- SUSE Bug 1271170
- SUSE CVE CVE-2026-15181 page
- SUSE CVE CVE-2026-15184 page
- SUSE CVE CVE-2026-9501 page
- SUSE CVE CVE-2026-9502 page
- SUSE CVE CVE-2026-9503 page
- SUSE CVE CVE-2026-9504 page
- SUSE CVE CVE-2026-9529 page
- SUSE CVE CVE-2026-9530 page
- SUSE CVE CVE-2026-9605 page
Описание
unknown
Затронутые продукты
Ссылки
- CVE-2026-15181
Описание
A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument next_obj results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used. Upgrading to version 0.14 is sufficient to resolve this issue. The patch is named dde45dac3c4d902e4d8fed150a8017b9732019c9. Upgrading the affected component is recommended. Different than CVE-2026-9503.
Затронутые продукты
Ссылки
- CVE-2026-15184
- SUSE Bug 1271170
Описание
A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. A patch should be applied to remediate this issue.
Затронутые продукты
Ссылки
- CVE-2026-9501
- SUSE Bug 1266377
Описание
A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. To fix this issue, it is recommended to deploy a patch.
Затронутые продукты
Ссылки
- CVE-2026-9502
- SUSE Bug 1266378
Описание
A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 8f03865f37f5d4ffd616fef802acc980be54d300. Upgrading the affected component is advised.
Затронутые продукты
Ссылки
- CVE-2026-9503
- SUSE Bug 1266379
- SUSE Bug 1271170
Описание
A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: be996bf2178a40e98720f18c2414815d244413db. Applying a patch is the recommended action to fix this issue.
Затронутые продукты
Ссылки
- CVE-2026-9504
- SUSE Bug 1266321
Описание
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
Затронутые продукты
Ссылки
- CVE-2026-9529
- SUSE Bug 1266380
Описание
A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a manipulation can lead to out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8f03865f37f5d4ffd616fef802acc980be54d300. It is advisable to implement a patch to correct this issue.
Затронутые продукты
Ссылки
- CVE-2026-9530
- SUSE Bug 1266287
Описание
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.
Затронутые продукты
Ссылки
- CVE-2026-9605
- SUSE Bug 1266365