Accepted librecad 2.1.2-1+deb9u2 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 02 Dec 2021 16:50:52 +0100
Source: librecad
Binary: librecad librecad-data
Architecture: source
Version: 2.1.2-1+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Sylvain Beucler <beuc@debian.org>
Description:
librecad - Computer-aided design (CAD) system
librecad-data - Computer-aided design (CAD) system -- shared files
Changes:
librecad (2.1.2-1+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* CVE-2021-21898: A code execution vulnerability exists in the
dwgCompressor::decompress18() functionality of LibreCad libdxfrw. A
specially-crafted .dwg file can lead to an out-of-bounds write.
* CVE-2021-21899: A code execution vulnerability exists in the
dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw. A
specially-crafted .dwg file can lead to a heap buffer overflow.
* CVE-2021-21900: A code execution vulnerability exists in the
dxfRW::processLType() functionality of LibreCad libdxfrw. A
specially-crafted .dxf file can lead to a use-after-free
vulnerability.
Checksums-Sha1:
a4222274f335233ea611afff34fe0ed7175a34cb 2264 librecad_2.1.2-1+deb9u2.dsc
866bda4b93c780e475da4959bbeb607c74c61332 22415451 librecad_2.1.2.orig.tar.gz
7b00cb48aab2da9524a4eebc06569f677d7e8104 16664 librecad_2.1.2-1+deb9u2.debian.tar.xz
83b9399eaff7502b51217837df9c776034e0219a 13236 librecad_2.1.2-1+deb9u2_amd64.buildinfo
Checksums-Sha256:
4ec2f29033602c029e973cfa75cb86f27b7b4125edf833cd8aee44ead9b2b57f 2264 librecad_2.1.2-1+deb9u2.dsc
12ece7102c9406b28acf5901e20e7940c44b570957d24599793c90c38d882d3e 22415451 librecad_2.1.2.orig.tar.gz
682a0f7861055635b498375256fe6a66afabb7bf54a05974c5a1bc0f6055a107 16664 librecad_2.1.2-1+deb9u2.debian.tar.xz
d9d3fd3a0728ad5688f66f3072c92d4823671937fd8bbccff14c2d34c3d550a2 13236 librecad_2.1.2-1+deb9u2_amd64.buildinfo
Files:
c728c67a0702d90bfbeeb21dd26ec21c 2264 graphics optional librecad_2.1.2-1+deb9u2.dsc
f4bad1105b371b21622e0237d5d3c000 22415451 graphics optional librecad_2.1.2.orig.tar.gz
917290832db7f00dd2f2734735374bb9 16664 graphics optional librecad_2.1.2-1+deb9u2.debian.tar.xz
8937ba91ea0c2425d89f21c642944d1d 13236 graphics optional librecad_2.1.2-1+deb9u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=h/Ya
-----END PGP SIGNATURE-----