File _patchinfo of Package patchinfo.17493
<patchinfo incident="17493"> <issue tracker="bnc" id="1193372">VUL-0: CVE-2021-28237: libredwg: heap-buffer overflow via decode_preR13.</issue> <issue tracker="cve" id="2021-28237"/> <packager>jengelh</packager> <rating>important</rating> <category>security</category> <summary>Security update for libredwg</summary> <description>This update for libredwg fixes the following issues: Update to release 0.12.5 [boo#1193372] [CVE-2021-28237] * Restricted accepted DXF objects to all stable and unstable classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e. most unstable objects do not allow unknown DXF codes anymore. This fixed most oss-fuzz errors. </description> </patchinfo>