Security update for libredwg SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2020:0095-1 Final 1 1 2020-01-22T17:11:24Z current 2020-01-22T17:11:24Z 2020-01-22T17:11:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libredwg This update for libredwg fixes the following issues: libredwg was updated to release 0.9.3: * Added the -x,--extnames option to dwglayers for r13-r14 DWGs. * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle for r13. * Add DICTIONARY.itemhandles[] for r13 and r14. * Fixed some dwglayers null pointer derefs, and flush its output for each layer. * Added several overflow checks from fuzzing [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826], [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828], [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832] * Disallow illegal SPLINE scenarios [CVE-2019-20009, boo#1159824] Update to release 0.9.1: * Fixed more null pointer dereferences, overflows, hangs and memory leaks for fuzzed (i.e. illegal) DWGs. Update to release 0.9 [boo#1154080]: * Added the DXF importer, using the new dynapi and the r2000 encoder. Only for r2000 DXFs. * Added utf8text conversion functions to the dynapi. * Added 3DSOLID encoder. * Added APIs to find handles for names, searching in tables and dicts. * API breaking changes - see NEWS file in package. * Fixed null pointer dereferences, and memory leaks (except DXF importer) [boo#1129868, CVE-2019-9779] [boo#1129869, CVE-2019-9778] [boo#1129870, CVE-2019-9777] [boo#1129873, CVE-2019-9776] [boo#1129874, CVE-2019-9773] [boo#1129875, CVE-2019-9772] [boo#1129876, CVE-2019-9771] [boo#1129878, CVE-2019-9775] [boo#1129879, CVE-2019-9774] [boo#1129881, CVE-2019-9770] Update to 0.8: * add a new dynamic API, read and write all header and object fields by name * API breaking changes * Fix many errors in DXF output * Fix JSON output * Many more bug fixes to handle specific object types This update was imported from the openSUSE:Leap:15.1:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2020-95 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ E-Mail link for openSUSE-SU-2020:0095-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1129868 SUSE Bug 1129868 https://bugzilla.suse.com/1129869 SUSE Bug 1129869 https://bugzilla.suse.com/1129870 SUSE Bug 1129870 https://bugzilla.suse.com/1129873 SUSE Bug 1129873 https://bugzilla.suse.com/1129874 SUSE Bug 1129874 https://bugzilla.suse.com/1129875 SUSE Bug 1129875 https://bugzilla.suse.com/1129876 SUSE Bug 1129876 https://bugzilla.suse.com/1129878 SUSE Bug 1129878 https://bugzilla.suse.com/1129879 SUSE Bug 1129879 https://bugzilla.suse.com/1129881 SUSE Bug 1129881 https://bugzilla.suse.com/1154080 SUSE Bug 1154080 https://bugzilla.suse.com/1159824 SUSE Bug 1159824 https://bugzilla.suse.com/1159825 SUSE Bug 1159825 https://bugzilla.suse.com/1159826 SUSE Bug 1159826 https://bugzilla.suse.com/1159827 SUSE Bug 1159827 https://bugzilla.suse.com/1159828 SUSE Bug 1159828 https://bugzilla.suse.com/1159831 SUSE Bug 1159831 https://bugzilla.suse.com/1159832 SUSE Bug 1159832 https://www.suse.com/security/cve/CVE-2019-20009/ SUSE CVE CVE-2019-20009 page https://www.suse.com/security/cve/CVE-2019-20010/ SUSE CVE CVE-2019-20010 page https://www.suse.com/security/cve/CVE-2019-20011/ SUSE CVE CVE-2019-20011 page https://www.suse.com/security/cve/CVE-2019-20012/ SUSE CVE CVE-2019-20012 page https://www.suse.com/security/cve/CVE-2019-20013/ SUSE CVE CVE-2019-20013 page https://www.suse.com/security/cve/CVE-2019-20014/ SUSE CVE CVE-2019-20014 page https://www.suse.com/security/cve/CVE-2019-20015/ SUSE CVE CVE-2019-20015 page https://www.suse.com/security/cve/CVE-2019-9770/ SUSE CVE CVE-2019-9770 page https://www.suse.com/security/cve/CVE-2019-9771/ SUSE CVE CVE-2019-9771 page https://www.suse.com/security/cve/CVE-2019-9772/ SUSE CVE CVE-2019-9772 page https://www.suse.com/security/cve/CVE-2019-9773/ SUSE CVE CVE-2019-9773 page https://www.suse.com/security/cve/CVE-2019-9774/ SUSE CVE CVE-2019-9774 page https://www.suse.com/security/cve/CVE-2019-9775/ SUSE CVE CVE-2019-9775 page https://www.suse.com/security/cve/CVE-2019-9776/ SUSE CVE CVE-2019-9776 page https://www.suse.com/security/cve/CVE-2019-9777/ SUSE CVE CVE-2019-9777 page https://www.suse.com/security/cve/CVE-2019-9778/ SUSE CVE CVE-2019-9778 page https://www.suse.com/security/cve/CVE-2019-9779/ SUSE CVE CVE-2019-9779 page SUSE Package Hub 15 SP1 libredwg-devel-0.9.3-bp151.2.3.1 libredwg-tools-0.9.3-bp151.2.3.1 libredwg0-0.9.3-bp151.2.3.1 libredwg-devel-0.9.3-bp151.2.3.1 as a component of SUSE Package Hub 15 SP1 libredwg-tools-0.9.3-bp151.2.3.1 as a component of SUSE Package Hub 15 SP1 libredwg0-0.9.3-bp151.2.3.1 as a component of SUSE Package Hub 15 SP1 An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec. CVE-2019-20009 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20009.html CVE-2019-20009 https://bugzilla.suse.com/1159824 SUSE Bug 1159824 An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. CVE-2019-20010 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20010.html CVE-2019-20010 https://bugzilla.suse.com/1159825 SUSE Bug 1159825 An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c. CVE-2019-20011 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20011.html CVE-2019-20011 https://bugzilla.suse.com/1159826 SUSE Bug 1159826 https://bugzilla.suse.com/1174236 SUSE Bug 1174236 An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec. CVE-2019-20012 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20012.html CVE-2019-20012 https://bugzilla.suse.com/1159827 SUSE Bug 1159827 An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec. CVE-2019-20013 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20013.html CVE-2019-20013 https://bugzilla.suse.com/1159828 SUSE Bug 1159828 An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. CVE-2019-20014 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20014.html CVE-2019-20014 https://bugzilla.suse.com/1159831 SUSE Bug 1159831 An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec. CVE-2019-20015 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-20015.html CVE-2019-20015 https://bugzilla.suse.com/1159832 SUSE Bug 1159832 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension. CVE-2019-9770 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 critical 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9770.html CVE-2019-9770 https://bugzilla.suse.com/1129881 SUSE Bug 1129881 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c. CVE-2019-9771 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9771.html CVE-2019-9771 https://bugzilla.suse.com/1129876 SUSE Bug 1129876 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec. CVE-2019-9772 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9772.html CVE-2019-9772 https://bugzilla.suse.com/1129875 SUSE Bug 1129875 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension. CVE-2019-9773 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9773.html CVE-2019-9773 https://bugzilla.suse.com/1129874 SUSE Bug 1129874 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c. CVE-2019-9774 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 important 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9774.html CVE-2019-9774 https://bugzilla.suse.com/1129879 SUSE Bug 1129879 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec. CVE-2019-9775 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 important 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9775.html CVE-2019-9775 https://bugzilla.suse.com/1129878 SUSE Bug 1129878 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than CVE-2019-9779). CVE-2019-9776 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9776.html CVE-2019-9776 https://bugzilla.suse.com/1129868 SUSE Bug 1129868 https://bugzilla.suse.com/1129873 SUSE Bug 1129873 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec. CVE-2019-9777 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9777.html CVE-2019-9777 https://bugzilla.suse.com/1129870 SUSE Bug 1129870 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec. CVE-2019-9778 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9778.html CVE-2019-9778 https://bugzilla.suse.com/1129869 SUSE Bug 1129869 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than CVE-2019-9776). CVE-2019-9779 SUSE Package Hub 15 SP1:libredwg-devel-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg-tools-0.9.3-bp151.2.3.1 SUSE Package Hub 15 SP1:libredwg0-0.9.3-bp151.2.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CB4KYAOZG4PVHBRMTUFDVV5OODRWDAWI/ https://www.suse.com/security/cve/CVE-2019-9779.html CVE-2019-9779 https://bugzilla.suse.com/1129868 SUSE Bug 1129868 https://bugzilla.suse.com/1129873 SUSE Bug 1129873