CVE-2022-33025
Fixed in a distro release EPSS <1%
LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c.
Products: gnu libredwg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP5 | libredwg | 0.12.5.5907-bp155.3.3.1 |
| openSUSE Leap 15.5 | libredwg | 0.12.5.5907-bp155.3.3.1 |
| openSUSE Tumbleweed | libredwg | 0.12.5.5907-1.1 |